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Abstract 



We determine the limiting distribution of the normahzed Euler fac- 
tors of an abelian surface A defined over a number field k when A is 
^ ^ \ Q-isogenous to the square of an elliptic curve defined over k with complex 

multiplication. As an application, we prove the Sato- Tate Conjecture for 
Jacobians of Q- twists of the curves y^ = x^ — x and y^ = x^ + 1, which 
2 . give rise to 18 of the 34 possibilities for the Sato- Tate group of an abelian 

surface defined over Q. With twists of these two curves one encounters, 
in fact, all of the 18 possibilities for the Sato- Tate group of an abelian 
surface that is Q-isogenous to the square of an elliptic curve with complex 
multiplication. Key to these results is the twisting Sato-Tate group of a 
curve, which we introduce in order to study the effect of twisting on the 
Sato-Tate group of its Jacobian. 



Contents 



1 Introduction 2 

1.1 Two isolated points in the moduli space of genus 2 curves .... 4 

1.2 Main result 5 

1.3 Numerical computations 7 

^^ , 1.4 Acknowledgements 7 

b ■ 

. . .' 2 The twisting Sato-Tate group of a curve 7 

3 Squares of CM elliptic curves 10 

3.1 The Galois modules Hom(£:L,AL) and End(AL) 11 

3.2 Equidistribution for Frobenius conjugacy classes 12 

3.2.1 The 1-dimensional ^-adic representation attached to Ep- ■ 14 

3.2.2 The Hecke character attached to Ep 15 

3.2.3 Equidistribution statements 16 

3.3 Equidistribution of oi (A) and 02 (A) 17 

3.4 Additional remarks 21 



4 Twists of y'^ = x^ — X and y"^ — x^ + \ 22 

4.1 Fields of definition of isoniorphisms 22 

4.2 The Galois module Honi(£;^,Jac(C)L) 23 

4.3 The triples T(C) 28 

5 Numerical computations 31 

5.1 Generating twists of C° 32 

5.2 Provisional computation of T{C) 33 

5.2.1 Computation of ai(C)(p) and 02(6*) (p) 33 

5.3 Computation of K and L 34 

5.3.1 An example 35 

6 Tables 36 



1 Introduction 

Let A be an abelian variety of dimension (7, defined over a number field k. The 
generalized Sato-Tate conjecture predicts that the Haar measure of a certain 
compact subgroup G of the unitary symplectic group USp(2(7) governs the dis- 
tribution of the normalized Euler factors Lp{A,T), as p varies over the primes 
of k where A has good reduction. The normalized Euler factor at a prime p 
is the polynomial Lp{A,T) = Lp{A,T/q''/^), where q — \\p\\ is the norm of p, 
and Lp{A,T) = 11^=1 (^ ~ oiiT) is the L-polynomial of A at p. The polynomial 
Lp {A, T) has the defining property that for each positive integer n 

i=l 

To make this precise, we need to specify the group G, and to define what 
it means for G to "govern" the distribution of the polynomials Lp{A,T). As- 
sociated to the abelian variety A, Serre [Scl2] has defined, in terms of -^-adic 
monodromy groups, a compact real Lie subgroup of USp(2(7), denoted ST(^) 
and called the Sato-Tate group of A, satisfying the following property: for 
each prime p at which A has good reduction, there exists a conjugacy class of 
ST(A) whose characteristic polynomial equals Lp{A,T) := ^i^q ai{A){p)T'^ .^ 
For i — 0,1,..., 2(7, let It denote the interval [— (^f), (^f)]? ^nd consider the 
map 

$, : ST(^) C USp(25) ^ /, C M (1.1) 

that sends an element of ST(A) to the ith coefficient of its characteristic polyno- 
mial. Let fx{ST{A)) denote the Haar measure of ST(A) and let $j,*(/z(ST(yl))) 
denote its image on li by $i. We can now state the generalized Sato-Tate 
Conjecture. 



^See also [FKRS12, §2] for a brief summary of this construction; there the Sato-Tate group 
of A is denoted ST a, rather than ST (A). 



Conjecture 1.1. For i — 0, 1, ... , 2g, the ai{A){p) 's are equidistributed on li 
with respect to $j,*(/i(ST(A)))." 

The original Sato- Tate conjecture addresses the case where A is an elhptic 
curve E/Q without complex multiplication (CM), in which case g = I and 
ST(^) = USp(2) = SU(2). This case of the conjecture has recently been proved; 
see [Scl2, p. 105] for a complete list of references. For elliptic curves E/k with 
complex multiplication, there are two cases, depending on whether the CM 
field M is contained in k or not. In the former case ST(£') is isomorphic to 
the unitary group U(l) (embedded in SU(2)), and in the latter case ST(£') is 
isomorphic to the normalizer of U(l) in SU(2). Both cases follow from classical 
results that we recall in §3.2. 

In all three cases arising for 5 = 1, it is easy to see that the Sato- Tate group 
of E is invariant under twisting: if E' is isomorphic to E over Q then ST(i?') is 
isomorphic to ST(ii^). However, when g > 1 this is no longer true. 

The purpose of this article is to study the possibilities for the Sato- Tate 
group of the Jacobians of twists of genus 2 curves defined over Q with many 
automorphisms (these arise for curves whose Jacobians are Q-isogenous to the 
square of an elliptic curve with complex multiplication), and to prove that in 
these cases Conjecture 1.1 is true'^. 

The curves we consider give rise to 18 of the 34 Sato- Tate groups that can 
occur for an abelian surface defined over Q, yet they all lie in one of the two Q- 
isomorphism classes corresponding to the curves listed in the title of this article. 
This makes apparent the importance of understanding the effect of twisting on 
the Sato- Tate group. 

In the remainder of this section, we describe the two points in the moduli 
space of genus 2 curves that are the object of our study, and state our main 
result (Theorem 1.4). We also describe the numerical computations used to 
obtain explicit examples that realize all the possibilities permitted by our main 
theorem. 

Let us first fix some notation. Throughout this paper Q denotes a fixed 
algebraic closure of Q that is assumed to include the number field k and all of 
its algebraic extensions. Let Gk = Gal(Q/fc) denote the absolute Galois group 
of k. For any algebraic variety X defined over k and any extension L/k, we use 
Xl to denote the algebraic variety defined over L obtained from X by the base 
change k '-^ L. For abelian varieties A and B defined over fc, we write A ^ B 
to indicate that there is an isogeny between A and B that is defined over k. We 
may write A ~fc B to emphasize the field of definition, but this is redundant (to 
indicate an isogeny defined over an extension L/k we write Al ^ Bl). 



^When we make equidistribution statements, we sort primes in increasing order by norm. 
•^ Using the techniques of this article one can obtain analogous results for genus 3 curves 
with many automorphisms, such as the Fermat and Klein quartics. 



1.1 Two isolated points in the moduli space of genus 2 
curves 

Let C be a curve of genus 5 < 3 defined over k. In §2, we define the twisting 
Sato-Tate group STtwIC*) o/C, a compact Lie group with the property that the 
Sato- Tate group of the Jacobian of any twist of C is isomorphic to a subgroup 
of STtw(C')- There is a well-known bijection between the set of twists of C 
up to /c-isomorphism and the cohomology group iJ^(G'fc, Aut(CQ)), given by 
associating to a twist C of C the class of the cocycle ^(t) := (j){'^ (j))~^ . Here (j> 
is an isomorphism from C^ to CW. Thus the group Aut(CW) turns out to be a 
good measure of how complicated the twists of C can be. 

For the rest of §1 we let fc = Q and g — 2. The automorphism group Aut(CQ) 
is then one of the following seven groups: 

C2, D2, D4, De, Cio, 2D6, S4. 

Here C„ denotes the cyclic group of n elements, D„ denotes the dihedral group 
of order 2n, and Sn is the symmetric group on n letters. The groups 2D6 and 
S4 denote certain double covers of Dg and S4 that are defined in section §4. In 
the generic case, Aut(CQ) is isomorphic to C2. This implies that every twist C" 
of C is quadratic, and we have ST(Jac(C")) = ST(Jac(C)) = STtw(C). 

We are interested in the opposite situation: the two exotic cases in which 
Aut(CQ) is as large as possible: 2D6 and S4. All genus 2 curves C with Aut(CQ) 
isomorphic to 2Dg (resp. S4) are isomorphic to 

y'^ =x^ + 1 (resp. y^ = x^ - x), (1.2) 

thus they constitute a single Q-isomorphism class C3 (resp. C2) of curves, an 
isolated point in the moduli space of all genus 2 curves. 

We shall choose representative curves (7° and C3 for C2 and C3 that are 
defined over Q and have particularly nice arithmetic properties. We write C'^ 
(resp. C) to denote either C2 or C3 (resp., either C2 or C3). The key arithmetic 
property we require of C" is that its Jacobian be Q-isogenous to E'^, where E 
is an elliptic curve defined over Q (with CM). This applies only to the curve 
j/2 = x^ + 1 listed in (1.2), which we take as our representative C3 for the 
class C3, but it also applies to the curve 

y^ =x^ - 5x^ - 5a;2 -I- 1, (1.3) 

which we take as a better representative C2 for the class C2 of y^ = x^ — x. 

The classification in [FKRS12] gives an explicit description of each of the 
52 Sato-Tate groups that can and do arise in genus 2, as subgroups of USp(4), 
of which 32 have identity component (isomorphic to) U(l). The two curves 
listed in (1.2) both appear in [FKRS12], where they are shown to have Sato- 
Tate groups with identity component U(l). It follows that if C is a twist of 
either of these curves, then ST(Jac(C)) also has identity component U(l). In 
fact, the representative curves for all 32 of the U(l) cases listed in [FKRS12] 



are actually twists of one of the two curves in (1.2) (possibly using an extended 
field of definition) . 

Among the 32 genus 2 Sato- Tate groups with identity component U(l), two 
are maximal. The first has component group S4 x C2 and is denoted J{0), while 
the second has component group Dg x C2 and is denoted J{Dq). We will prove 
that STtw(C2) = J{0) and STtw(C3) = J{Dq), and, as a consequence, that 
the Sato- Tate group of any twist of C2 (resp. C3 ) is isomorphic to a subgroup of 
J{0) (resp. J{Dq)). Conversely, we will show that every Sato- Tate group that 
can occur over Q and is isomorphic to a subgroup of J{0) (resp. J{Dq)) arises 
for some Q-twist C of C2 (resp. C3), by giving explicit examples in each case.* 
Most of the Sato- Tate groups G with identity component U(l) are actually 
subgroups of both J{0) and J{Dq). In such cases we exhibit Q-twists of both 
C2 and C3 that have Sato- Tate group G. 

1.2 Main result 

Recall that C° denotes either (7° or C3. These are both genus 2 curves defined 
over Q whose Jacobians are Q-isogenous to the square of an elliptic curve E/Q 
with CM by an imaginary quadratic field M equal to Q(\/— 2) or Q(V— 3), 
respectively. Our main result is that Conjecture 1.1 holds for the Jacobians of 
the Q-twists C oiC°. 

In order to state the theorem more precisely, we introduce some notation. 

Definition 1.2. For any Q-twist G ofG^, let K/Q (resp. L/Q) denote the min- 
imal extension over which all endomorphisms 0/ Jac(C)Q (resp. homomorphisms 
from Jac(C)Q to Eq) are defined. Then we write T{C) for the isomorphism class 

[Gal{L/Q), Gsi\{K/Q),Ga\{L/M)] . 

We say that two triples of groups {Hi, H2, H3) and {H[,H'2, if 3) are isomor- 
phic if Hi ~ H[ for i = 1,2, 3. We write [Hi, H2, H3] for the isomorphism class 
of {Hi, H2, H3), which we regard as a triple of abstract groups. 

Definition 1.3. For any finite group H with a subgroup Hq and a normal 
subgroup N, let o{s,r) (resp. o{s,r)) count the elements in Hq (resp. H\ Hq) 
of order s whose projection in H/N has order r. Let z{H, N, Hq) denote the 
vector [zi,Z2\, where 

zi = [o{l, 1), 0(2, 1), 0(2, 2), 0(3, 3), 0(4, 2), 0(6, 3), 0(6, 6), 0(8, 4), 0(12, 6)] , 
Z2 = [5(2, 2), 0(4, 2), 0(6, 6), 0(8, 4), 0(12, 6)] . 

For any Q-twist G of G^ , write 

z{G) := [zi{G),Z2{G)] := z(Gal(i/Q), Gal(i/i^), Gal(L/A'f)) . 



*We call C a Q-twist of C° if C is defined over Q and C^ ~ C° 



We also define o{r) = J2s ^(^^ '') ^^^ '^i^) — Sr ^(■^j ''")■ ^^ ^^^^ ^^^^ '^^ ^^^ 
cases of interest, z{H, N, Hq) is z{C) for some Q- twist C of C°. In this situation, 
o{r) is the number of elements in Gal(L/M) whose projection to Gal{K / M) has 
order r, and o{s) is the number of elements of order s in Gal(L/Q) that arc not 
in Gal(L/M). Clearly 

5]o(s,r)=^o(s,r)-|Gal(i/Q)|/2. 

Moreover, we prove in Proposition 4.9 that the only pairs (r, s) for which o(r, s) 
or d{r, s) can be nonzero are those that appear in the vectors zi and Z2. 

Finally, let Lp{C,T) denote the Euler factor of C at a prime p of good 
reduction. We may write the normalized Euler factor Lp{C,T) = Lp{C,T /p^'^) 
as 

Lp{C,T) =T* + a,iC){p)T^ + a2{C){p)T^ + a^{,C){p)T + 1. 

We are now ready to state our main theorem. 

Theorem 1.4. Let C he a Q-twist of C° . 

(i) There are exactly 20 possibilities for T{C) if C^ = C^, and 21 if C^ = Cg. 

(ii) The triple T{C) and the vector z{C) uniquely determine each other. 

(iii) The triple T{C) (or z{C)) determines the Sato-Tate group ST(Jac(C)). 

(iv) Fori — 1,2, the ai{C){p) 's are equidistributed on Ii = [^(i)'(j] with 
respect to a measure fi{ai{C)) that is uniquely determined by the vector 
z{C). More precisely, the density function of ^(ai{C)) is continuous up 
to a finite number of points, and it is therefore uniquely determined by its 
moments: 

M„[^(ai(C))] = iiiQj(o(l)2" + 0(3) + o(4)2"/2 + o(6)3"/2)6o.„ , 

M„[Ai(a2(C))] = ^(o(l)64,n + o(2)6o,„ + o(3)6i,„ + o(4)62,„ + o(6)53,„ 

+ 5(2)2" + o(4)(-2)" + o(6)(-l)" + 5(12)) . 

Here bm,n denotes the coefficient^ of X"' in {X"^ + mX + 1)". 

(v) Conjecture 1.1 holds for C . 

We actually prove statement (iv) in greater generality, for an abelian sur- 
face A defined over a number field k with A^ ^ E^, where E is an elliptic 
curve defined over k with CM by a quadratic imaginary field M. This is accom- 
plished in §3 via Corollary 3.12, whose proof relies on a study of the structure of 
Hom(i?L, Al) (g^M Q as a Galois Q[Gal(L/M)]-module and a refined equidistri- 
bution statement of Frobenius elements of a CM elliptic curve when restricted to 
certain Galois conjugacy classes (see Corollary 3.8). We compute the moments 

1 



tt{x) 



M„[a,(C)] := lim -^ }_^ a,(C)(p)", 



p<x 



SPor m = 0, 1, 2, 3, 4 the bm,n form the sequences A126869, A0002426, A000984, A026375, 
A081671, respectively, in the Online Encyclopedia of Integer Sequences [OEIS]. 



where p varies over primes of good reduction, and prove equidistribution of the 
ai(C)(p)'s with respect to a measure ^{ai{C)). It fohows that M„[/i(ai(C))] = 
Mn[ai{C)]. We devote §4 to the proofs of assertions (i), (ii) and (iii), which 
follow from Corollary 4.17, Proposition 4.15, and Proposition 4.16, respectively. 
The final assertion (v) follows from (iii) and (iv): it is enough to check that for 
each of the 41 possibilities of T(C), the formulas obtained for /z[ai(C)] coincide 
with the ones obtained for $,,*(Vi(ST(Jac(C)))) in [FKRS12]. 

1.3 Numerical computations 

In §5 we show that all 41 of the possible triples T{C) determined in section 
§4 actually arise for some Q-twist C of C° by exhibiting a provable example 
of each case. The example curves C were obtained by an extensive search 
that was made feasible by part (ii) of Theorem 1.4; it is computationally much 
easier to approximate z{C) than it is to explicitly compute T{C), which requires 
computing the Galois groups of number fields of fairly large degree (48 or 96 in 
the most typical cases). 

For an elliptic curve E with CM, the values ai(E)(j)) can be computed very 
quickly, and we show how to compute ai{C){p) and a2{C){p) from ai{E){p), us- 
ing the fact that Jac(C) is Q-isogenous to E^ (see Proposition 4.9). This allows 
us to efficiently compute an approximation of 2:(C) (using again Proposition 4.9) 
of precision sufficient to provisional identify T{C) (via part (ii) of Theorem 1.4). 
Many curves were analyzed (tens of thousands) in order to obtain 41 candidate 
examples, one for each possible triple T{C). For each of these 41 candidates we 
then proved that the provisional identification of T{C) is correct, by explicitly 
computing the Galois groups Gal(L/Q), Ga\{K/Q), and Gal(L/M). 
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2 The twisting Sato-Tate group of a curve 

In this section we define the twisting Sato- Tate group, which is our main object 
of study. We do so in terms of the algebraic Sato-Tate group defined by Banaszak 
and Kedlaya in [BKll]. Let A be an abelian variety of dimension g < 3 defined 
over a number field k, and fix an embedding of k into C . Fix a polarization 



on A and a symplectic basis for the singular homology group Hi^A^^"^, Q). Use 
it to equip this space with an action of GSp2g(Q). For each t £ Gk, define 

L{A, t) ~ {7 e Sp2g : 7-^07 = ^a for all a e End(AQ) (g) Q}. (2.1) 

Here we view a as an endomorphism of Hi{A^^,Q). The algebraic Sato-Tate 
group of A is defined by 

AST(A):= U L(A,t). 

reGk 

The Sato-Tate group ST(yl) is a maximal compact subgroup of AST(A) (X)q C; 
see [BKll, Thm. 6.1, Thm. 6.10]. 

Remark 2.1. As noted in the introduction, ST{A) is invariant under twisting 
when 5 = 1. This does not hold for g > 1, however ST(A) is invariant under 
quadratic twisting. For g < 3 this follows easily from the definitions above. 
Indeed, let x'- Gk -^ C be a quadratic character. For every r G Gk, one has 
L(^(g)X,T) = L(A,r) (g)x(T) (see (2.2) for a more general relation). Invariance 
under quadratic twisting follows from the fact that L(A, r) (8) x(t) = L(A,t). 
For A of arbitrary dimension, the invariance of ST(^) under quadratic twisting 
follows easily from the definition ofST{A) given in [Sel2] (see also [FKRS12]), 
in terms of the image of the £-adic representation attached to A. 

We now assume that A is the Jacobian Jac(C) of a curve C defined over fc, 
and view Aut(CQ) as a subgroup of GL(i/i(Jac(C)p°^, Q)). 

Definition 2.2. The twisting algebraic Sato-Tate group of G is the algebraic 
subgroup o/Sp2„/Q defined by 

ASTtw(C) := AST(Jac(C)) • Aut(CQ) . 

Observe that ASTtw(C) is indeed a group: for any 71,72 G AST(Jac(C)) 
and ai,a2 G Aut(CQ), we have 

7iai(72a2)""^ = 7172^^2 [aiQ;2"^]72"^ = 71(72"^)^^ (aia2) € ASTtw(C) . 

Now let C" be a twist of G, a curve defined over k for which C^ ~ Gl for 
some finite Galois extension L/k. Let 0: C^ — > Cl be a fixed isomorphism. It 
is easy to check that 

L(Jac(C"), r) = (j>-^ L(Jac(C), T)f 0) . (2.2) 

Here (/> is seen as a homomorphism from Hi(3a,c{G')^^ , Q) to ifi(Jac(C)p°^, <Q). 

Lemma 2.3. Let 7' e L(Jac(C"),T) C AST(Jac(C")). Write 7' as <j)-^-/C<j)) 
with 7 in L(Jac(C),T), as in (2.2). The map 

A^ : AST(Jac(C')) ^ ASTtw(C) , A^(7') = ^[' 

is a (well-defined) monomorphism of groups. 



Proof. Let ^[ = (j)-^-/i{^^(j)) and 7^ = (/'"W2(^''/') be elements of L(Jac(C"), n) 
and L(Jac(C"), r2), respectively. Then 

A0(7i72) = A4r'7i7272"'[r0)r']72r'/')) 

= A4r'7i72r"^0)) = 7i72r"V)0"' 

= 7i72[r^V)r^0)-']72"'72(^^<^)r' 

= 7ir0)0^'72r^)0-' = A47;)A47^) . 



It is clear that A^ is both well defined and injective: A0(7^) — A^{'-f2) if and 
only if 7^=7^. D 

We now define the twisting Sato- Tate group STtw (C) of C. 

Definition 2.4. The twisting Sato- Tate group STtwCC") of C is a maximal 
compact subgroup 0/ ASTtw(C') "X) C. 

Remark 2.5. It follows from the previous lemma that for any twist C" of C , 
the Sato-Tate group ST(Jac(C)) is isomorphic to a subgroup of ST^^{C). We 
also note that the component groups of STtw(C') cmd ASTtw(C') (^ C must be 
isomorphic, and the identify components o/STtw(C') and ST (3 ac{C)) are 



Our next goal is to study the component group of STtwCC") when C is a 
hyperelliptic curve (of genus g < 3). Consider the group ^' 

Aut(CQ) X AST(Jac(C))/^ , 

where Z is the normal subgroup of Aut(CW) x AST(Jac(C)) consisting of the 
pairs (a, 7) with a = 7, where a £ Aut(CQ) and 7 G AST(Jac(C)). 

Lemma 2.6. The map 

$: ASTtw(C) -> Aut(CQ) x AST(Jac(C)) /^ , $(^q,) ^ (a-1,7) 

is a (well-defined) isomorphism. 

Proof. For any 71,72 G AST(Jac(C)) and ai,a2 G Aut(CQ), we have 

$(7iai72a2) = *(7i72(^^ai)a2) = (a2^^(^^ai)"\7i72) 
= {a^^,-/i){a2^,^2) = $(7iai)$(a272) ■ 

The surjectivity of $ is clear. It remains to prove that ^{jiai) = $(7202) if 
and only if 7iq;i = 72a2- On the one hand, $(7iai) — <I'(72Q;2) if and only if 

Z3 (a2"^72)(a^^7l)"^ - r^"'("i«2"^), 727r^) ■ 



^The product of elements (01,71) and («2,72) in Aut(CQ) x AST(Jac(C)) is defined to be 
(027^ """0172, 7172) = (02 ■''^01,7172), where 72 S L(A,T2) C AST(Jac(C)). 



On the other hand, 7iai = 72^2 if and only if aick2 — 7i 72, equivalently, 
^i"'(aia^i) = 727r^ But then (^r'(aia2'^),727r^) ^Z . U 

We now assume C is a hyperelhptic curve (of genus g < 3). As an endomor- 
phism of _ffi(Jac(C)j|,°'', Q), the hyperelhptic involution w of C corresponds to 
the matrix —1 e Sp2„(Q). Recall that AST(Jac(C)) contains the matrix —1. 
Thus (—1, —1) G Z and Lemma 2.6 implies that ASTtwIC*) is isomorphic to a 
subgroup of 

Aut(CQ) >^ ASTjac(c) /((_i^_i)) . 

Let Kjh denote the minimal field extension over which all the endomor- 
phisms of Jac(C) are defined. Then, since the component group of ST(Jac(C)) 
is isomorphic to Gal(i4r//c) (see [BKll, Rem. 6.4, Thm. 6.10]), and the iden- 
tity component of ST(Jac(C)) contains the matrix —1, the component group of 
STtw(C') is isomorphic to a subgroup of 

Aut(CQ)y^^^ xGal(is:/fc). 

By lemma 2.3, for any twist C" of C, there exists a monomorphism of groups 

A^: Q^\{Klk) -^ Aut(CQ)y^^^) >^ Gal(ii:/fc) . (2.3) 

It follows that if there exists a twist C* of C such that 

|Gal(i^/fc)| = I Aut(CQ)| • |Gal(if/fc)|/2 , (2.4) 

where K jk is the minimal extension over which all the endomorphisms of Jac(C) 
are defined, then STtw(C) = ST(Jac(C')), and for every twist C" of C, the Sato- 
Tate group ST(Jac(C")) is a subgroup of ST(Jac(C')). 

Remark 2.7. Let C2 and C3 be the two curves defined in ^1.1. If C is a twist 
0/C2 (resp. C^) such that ST(C') = J{0) (resp. J{Dq)), then equation (2.4) is 
satisfied. It follows that STtw(C^) = J{0) and STtw(C^) = JiDg). 

3 Squares of CM elliptic curves 

We shall work in the category of abelian varieties up to isogeny, so we call 
the elements of Hom(A, B) ^ Q homomorphisms, the elements of End(A) (E) Q 
endomorphisms, and the surjective elements in Hom(A, _B) (g) Q isogenics. 

We henceforth assume that A is an abelian variety over k such that A-^ ~ E^, 
where E is an elliptic curve defined over k with complex multiplication (CM) 
by an imaginary quadratic field AI (except in §3.4, where we do not assume E 
has CM). Let L/k be the minimal extension over which all the homomorphisms 
from £W to Aq are defined, and let K/k be the minimal extension over which 
all the endomorphisms of A-^ are defined. We note that kAI '^ K C L, and we 
have Hom(i%, A^) ~ Hom(_EL, ^l) and Al ^ E\. 
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3.1 The Galois modules }iom{EL,AL) and End{AL) 
Let a and a denote the two embeddings of M into Q. Consider 

Rom{EL,AL) ®M,a Q (resp. End(AL) ®M^a Q) , 

where the tensor product is taken via the embedding a: M ^^ Q. Letting 
Gal(L/fcM) act trivially on Q and naturally on Honi(£'L, A^), it acquires the 
structure of a Q[Gal(L/A:Af )]-module of dimension 2 (resp. 4) over Q, and sim- 
ilarly for a. 

Definition 3.1. Let 9 :— 9M,a{E, A) (resp. 9M,criA)) denote the representation 
afforded by the module }iom{EL, Al) ®M,a Q (resp. End(j4L) ®m,(7 '^), and 
similarly define 6 :— OM.wiE, A) and 0M,aiA). Let 6iq := 9iq{E,A) (resp. 9q,{A)) 
denote the representation afforded by the 'Q\GsX{L / k)\-module Hom(_Ei, Al)®<Q^ 
(resp. End(AL) (g) Q/ 

For each r G Gal(L/fcM) we write 

det(l - 9{t)T) = 1 + ai(0)(r)T + a2{e){T)T^ , 
where ai{9) ~ TiO and a2{9) = det{9) are elements of M. Observe that 

Ty9q{t) = TrM/QTr0(r) if r G Gal{L/kM). (3.1) 



For z £ M let \z\ ~ ^cj{z)a{z). 

Proposition 3.2. There is an isomorphism of Q[Ga\{L/kM)]-modules 

End(Ai) (E)M,a Q ^ (Hom(^L, Al) <S)Mm Q)* ® iiom{EL,AL) <S)M.a Q ■ 

Thus TT9M,aiA) = TT9M.aiE,A) ■ TT9M.aiE.A) = I Tr(6')|2 e Q, and therefore 
9mAA)-SmAA)- 

Proof. Consider the natural inclusion of Q[Gal(L/fcM)]-modules 

End(^L) (E)M,a Q ^ liom^{Rom{E l,Al) ®M,a Q, Hom(£;i, Al) ®M.a Q) , 

which sends an element tp in End(v4i) ®m,(j Q to the linear map of Q- vector 
spaces that sends / in 'Kouy{El,Al) ®M,iy Q to ^ o / in Hom(i?i, A/,) ®M,(y Q- 
Both spaces have dimension 4 over Q, and therefore must be isomorphic as 
^ }al(L/fcA/)]-modules. D 



Let tt: Gal(i/fcA/) — > Ga\{I-(/kM) be the natural projection. For each r 
in Gal(i/fcM), let s — s{t) denote the order of r and let r — r{T) denote the 
order of ■k{t) in G&\{K/kM). The possible values of r are 1, 2, 3, 4, and 6; see 
[FKRS12, §4.5]. 

Proposition 3.3. Suppose t e Gal(L/fc) does not lie in Gal(L/fcAf). Then the 
eigenvalues of 9q{E, A)(t) are as follows: 
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s = 2 
s = 6 



-1,-1,1,1 ,s = 8: C8,Cl,Cl,Cj 



i,i,-i,~'i 5 = 12: Ci2, Cf2> Cl2> Ci" 

Here, (r stands for an rth root of unity. 

Proof. We can assume that kM/k is quadratic, otherwise there is nothing to 
prove. We first show the fohowing properties of Oq{E, A): 

(i) The least common multiple of the orders of the eigenvalues of 9q{E, A){t) 
is equal to s. 

(ii) If T e Gal(L/fc) \ GaA{L/kM) then TTOqiE, A){t) = 0. 

It follows from the definition of L/k that the representation 9q{E, A) is faithful, 
which implies (i). Let x be the quadratic character of Gal{L/k) associated to 
the quadratic extension kM/k. Then E ®X'^k E (and, in fact, A®x^k A), 
which implies that Hom(^L, Al) = Hom(£'L, Al) ® x (by [MRS07, Prop. 1.6], 
for example). This proves (ii). 

For s = 2,6,8,12, the proposition follows from (i) and (ii). For s = 4, (i) 
implies that i is an eigenvalue of Oq{E, A){t) and (ii) leaves just two possibilities 
for the four eigenvalues: i,—i, 1,-1, or i,—i,i,—i. We now show that only 
the latter can arise. The eigenvalues of 9q,{E,A){t) are quotients of roots of 
Lp{E,T) and roots of Lp(A, T), where p is a prime of fc, inert in kM , of good 
reduction for A and E. We can further assume that p has absolute degree 1. 
Then Lp{E,T) — 1 + T^, and the polynomial Lp{A,T) is one of the following: 

(1-T2)2, l-T^^T-*, l + T-*, 1 + T^ + T^. {1+T^f. (3.2) 

In no case can both 1 and i arise as quotients of a root of Lp{E,T) = 1 + T^ 
and roots of Lp{A,T). D 

In view of Proposition 3.2, we write 9m{A) for O^.a-iA) ~ 9M,a{A). 

Proposition 3.4. For each t € Gal(L/fcM) we have 

TT9M{A){T)^2 + Cr + Cr- 

Proof It follows from [FKRS12, Prop. 9] that the eigenvalues of 9q{A){t) are 1, 
1, 1, 1, Cr, Cr, Cr; Cr- Equation (3.1) leaves three possibilities for the eigenvalues 
of 9m{A): they must be either 1, l,C,r, Cn or 1, 1, (^r, Crj or 1, 1, C^, C^. Since 
Tr 6'm(^) is rational (by proposition 3.2), only the first possibility can occur. D 

3.2 Equidistribution for Frobenius conjugacy classes 

We first recall the well-known notion of equidistribution on a compact topo- 
logical space X (see [Se68, Chap. 1]). Let C{X) denote the Banach space of 
continuous, complex valued functions / on X, with norm ||/|| = sup^.^^ I/(2;)|. 
Let /x be a Radon measure on X, a continuous linear form on C{X). Let {xi}i>i 
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be a sequence of points of X. The sequence {xi}i>i is said to be equidistributed 
with respect to fi if for every / G C{X) we have 

/i(/) = hm — V/(a;i). 

m— >oo TJl — 

Note that if {xi}i>i is equidistributed with respect to ^, then /i is positive 
and has total mass 1. We are particularly interested in the case where X is an 
interval / of M. In this case the nth moment M„[/x] of /i is the value /i((/5„), 
where (p„ is the function of C(/) defined by ipn{z) — z"- Analogously, the nth 
moment of a sequence {a;i}i>i on /, if it exists, is defined by 



_, rn 

M„[{x,},>i] = lim — Vx^. 



m— >oo Til 

i=l 



Thus if the sequence {a;i}i>i is equidistributed with respect to fi on /, then its 
nth moment exists and is equal to M„ [fi] . 

Let F/k be a field extension, and let Pep denote the set of primes of F at 
which Ep has good reduction. We write the normalized L-polynomial for Ep 
at a prime p of Ppp as 

L^iEp, T) = 1 + ai{EF){p)T + T^ . 

Choose an ordering by norm {pi}i>i of PEF^ that is, an ordering for which 
||p|li < IIpIL for all 1 < i < j, and let ai{Ep) denote the sequence 

{al{Ep){p^)}^>l 

of real numbers in the interval [—2,2]. Equidistribution statements about 
ai{Ep) do not depend on the particular ordering by norm we have chosen. 

Until the end of this section, we assume that F contains kM. We begin by 
recalling classical results of Hecke and Deuring that yield equidistribution for 
ai{Ep) with respect to the measure 

1 dz 



supported on [2, —2]. Here dz denotes the restriction of the Lebesgue measure 
on R to the interval [—2, 2]. The measure /icm is uniquely characterized by the 
fact that it is continuous and its nth moment is 6„ := 6o,n (as in Theorem 1.4). 
We actually require a slightly stronger equidistribution statement than the 
one above. Let c be a Frobenius conjugacy class of an arbitrary finite Galois 
extension F' /F, and let Pc denote the set of primes in Ppp that are unramified 
in F' and whose Frobenius conjugacy class is c. We will show that the subse- 
quence ai^c{Ep) of ai{Ep) obtained by restricting to the primes in Pc is also 
equidistributed with respect to /Xcm- 



13 



Remark 3.5. Henceforth, for a compact group G, let fi{G) denote its Haar 
measure. In terms of the (generalized) Sato- Tate Conjecture, the measure /Xcm 
is seen as ^i^^,{ijl(ST{Ep))), where $i is the trace map defined in equation (1.1) 
and '&T{Ep) = U(l). Recall that the Sato- Tate group ST{E) of an elliptic 
curve E defined over k with CM by M is U(l) (embedded in SU(2) j if M is 
contained in k, and the normalizer o/U(l) in SU(2) if M is not contained in k. 

We follow the presentation in [Gr80, Chap. 1] . Let p be a prime of F of good 
reduction for Ep. Let Fp denote the algebraic closure of the residue field of F 
at p. The image of the injection 

End(AQ) (g}Q^ M ^ End(£'p ) (g) Q 

contains the Frobenius endomorphism Frp : E^ —^ E^ , which acts on a point by 
raising its coordinates to the gth power, where q = \\p\\. Let Q;(p) := a{Ep){p) G 
M* denote the preimage of Frp under this injection. Since the characteristic 
polynomial of Frp is reciprocal to the L-polynomial of Ep at p, we have 

ai{Ep){p) = --±-{a{a{p))+a{a{p))) . (3.3) 

IIpII 

For any place v oi F, let F^ denote the completion of F at w and let Oy 
denote the ring of integers of Fy . Let Ip = fl^ Fy denote the group of ideles 
of F. Here the product runs over all places v of F, and the prime means that if 
s = (s„) belongs to Ip, then s„ is in O* for all but finitely many v. We write v^ 
for the valuation associated to a finite prime p of F. We then attach to Ep the 
group homomorphism 

XEp ■■ If -^ M* 
uniquely characterized by the following three properties: 
(i) Ker(x_Ej?) is an open subgroup of Ip. 
(n) If s = (a) is a principal idele (a G F*), then X-Bf(s) = ^F/j\/(a)- 

(iii) If s = isy) is an idele with s^, = 1 at all infinite places of F and at those 
finite places where Ep has bad reduction, then 



XEA5) = X{a{py' 



,(Sp) 



3.2.1 The 1-dimensional ^-adic representation attached to Ep. 

Fix a prime t different from the characteristic of Fp and an embedding of Q into 
Q^, and let Vt{Ep) denote the (rational) €-adic Tate module of Ep. Define 

V,{E) := V,{Ep) ®M,a Qf , (3.4) 

where the tensor product is taken via the embedding M M> Q^ induced by a. 
Similarly define V-a{E). We then have an isomorphism of Q^ [GF]-niodules: 

Vt{Ep) ®Q^~ Va{E) e V-^{E) . (3.5) 
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Let Qi^a'- Gf -> Aut{Va{E)) denote the f-adic character correspondmg to the 
action of Gp on Va{E). If Frobp is an arithmetic Frobenius at p in Gp, then 
the value of g£,cr(Frobp) is o-(a(p)). Define 

i'e^a ■■ If ^ {M ®M^a Q^)*, i'lA^) = XEf(s) ® {NF/M{5-^))t , 

where for an idele s in 7^?, the component of the idele Np/m{s) in Im correspond- 
ing to the place w is n^iu; ^f^/m^ {Sv), where the product runs over all places v 
of F lying over w. We then have ipi^a-iF*) — 1, by property (ii). Thus ipi^a- 
is a continuous character on the group Cp = Ip/F* of classes of ideles. Since 
its image is totally disconnected, it is a character of Cp/Cp, where Cp is the 
identity component of Cp. Artin reciprocity yields an isomorphism Rec : G^ -^ 
Cp/Cp . Property (iii) then implies that ipi,cr o Rec(Frobp) — cr(a(p)), thus 

ipi^cr o Rec(Frobp) = g^^^ , (3.6) 

as €-adic characters of Gp. 

3.2.2 The Hecke character attached to Ep. 

A Hecke character of i^ is a continuous homomorphism ^: Ip ^ C* such that 
tp{F*) = 1. For primes p where ip is unramificd, let V'(p) denote ip{s), where Sp 
is a uniformizer of Op and Sy — 1 for w 7^ p, and let V-'(p) — when -0 is ramified 
at p. The L-function of ip is defined as 

P 

Hecke [Hc20] showed that if ip is nontrivial, then L(?/', s) is a nonzero holomor- 
phic function for ^{s) > 1. Let us fix an embedding of Q into C, so that we 
may view a and ct as embeddings of M into C Define 



ipoo,a ■■ If -^ (M (E)M,a C)*, ^|Joo,a{s) = XEp{s) (g) (A^f/m(s ^)) 



CO : 



where cxi denotes the only infinite place of M. Property (ii) of XEp, implies 
that V'oo,(T is a Hecke character. It is unramificd at the primes of good reduction 
for Ep, and we note that ip^ ^ = tpoo,a- Let \z\ denote the absolute value of a 
complex number z and define 

i^lo,a ■■ If -^ U(l), ^lo,A^) = i^oc,a{s)/\^Joc,a(s)\ . 

For every prime p of good reduction for Ep , let 

ai(p) := a,{Ep){p) := 0^_, o Rec(Frobp) = a{a{p))/ M'/' . (3.7) 

Let ai denote the sequence {ai(pi)}i>i. 
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3.2.3 Equidistribution statements. 

For a finite Galois extension F' /F and a conjugacy class c of Gal(F'/i^), let Pc 
be as above. Let ai.c '■— cti, dEp) denote the subsequence of ai obtained by 
restricting to the primes of Pc- Our goal is to prove the following proposition. 

Proposition 3.6. Let c be any conjugacy class of Gal{F'/F). Then ai^c 'is 
equidistrihuted with respect to /i(U(l)). 

We first recall a theorem of Serre. Let G be a compact group and X be the 
set of its conjugacy classes. Let P be an infinite subset of the primes of F, and 
let {pi}i>i be an ordering by norm of P. Assume that each p of P has been 
assigned a corresponding element Xp va X. 

Theorem 3.7. [Se68, p. F23] The sequence {xp;}i>i is equidistrihuted over X 
with respect to the image on X of the Haar measure of G if and only if L{g,s) 
is holomorphic and nonzero at s = 1 for every irreducible and nontrivial repre- 
sentation Q of G. Here L(g,s) stands for the infinite product 

l[det{l-g{xp)\\p\r)-'- 
peP 

We now use Theorem 3.7 to prove Proposition 3.6. 

Proof. We first reduce to the case that F' /F is abelian (in fact, cyclic). Let r 
be an element of c, and let / denote its order. Define 

I{T) = {^e{0,l,...,f-l}\[T^]^c}. 

Let H be the subfield of F' fixed by (r) . The residue degree over P of a prime *P 
of -ff lying over p is 1, thus ai(i?if)(*p) = ai(i?F)(p). Then ai^dEp) is the union 

iei{T) 

where we identify r' with its conjugacy class in the cyclic group Gal{F' / H) . It 
follows that the sequence ai^c = ciii,c{Ep) is /i(U(l))-equidistributed if all its 
subsequences ai T-i(i5//) are. But this hypothesis is true if one assumes that the 
proposition holds for abelian extensions. 

So suppose that F'/F is abelian, and define G := U(l) x Gal{F'/F) and 
Xp := ai(p) X Frobp for each prime in Ppp unramified in F'/F. Proving the 
proposition is equivalent to showing that {xp^}i>i is equidistrihuted over the 
set X of conjugacy classes of G with respect to the measure induced by the 
Haar measure of G. The irreducible characters of G are of the form <j>a €5 X, 
where (f>a ■ U(l) — > C* is a character of U(l), which is of the form <j)a{z) = z"' 
for some integer a, and x is an irreducible character of Gal(P'/i^), which is 1- 
dimensional, since Gal(_F'/F) is abelian. By Theorem 3.7, it is enough to show 
that \i <^a® X is nontrivial, then 

ma ®x.s)^ n(i - nir^^^p) iipii"'^"' 
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is holomorphic and nonzero at s = 1. 

Suppose that a > 0. Via Artin reciprocity we may view (V'oo.o-)" (81 X as a 
Hecke character, and then L((/)o (g) x, s) is equal, up to a finite number of factors, 
to the Hecke L-function -L((V'oo,cr)" X: * + f)- Since {tpoo,a)°' (81 X is a nontrivial 
Hecke character, its L-function is holomorphic and nonzero for Jfts > 1 and in 
particular, so is L{(j)a®X^ s) at s = 1. If a < 0, then we can repeat the argument, 
observing that L{4>a ® X: ■*) ^-Iso coincides, up to a finite number of factors, with 
the Hecke L-function L((^^^)"" (S" X: s - §). D 

Recalling that /Xcm = -^ if^ i supported on [—2, 2] is the image by $1 of the 
Haar measure of U(l), we obtain the following. 

Corollary 3.8. Let E he an elliptic curve defined over k with CM by an imag- 
inary quadratic field M . Let F he any field containing kM , let F' / F be a finite 
Galois extension, and let c be a conjugacy class ofGal{F'/F). Then 

(i) The sequence ai^dL^p) is equidistributed with respect to the measure ficm- 

(ii) M„[ai,,(^F)]=M„[ai(^j.)]. 

3.3 Equidistribution of ai{A) and 02 (A) 

As in §3.1, A is an abelian surface defined over k with A-^ ^ E^, where E 
is an elliptic curve defined over k with CM by M, and we have the tower of 
fields kM ^ K C L, where L/k is the minimal extension over which all the 
homomorphisms from Aq to E^; are defined, and K/k is the minimal extension 
over which all the endomorphisms of Aq are defined. 

For any field extension F/k, let Pap denote the set of primes of F at 
which Ap has good reduction. For p in Paf, we write the normalized L- 
polynomial for Ap at p as 

Lp(Af ,r) = 1 + aiiAF)ip)T + a2iAFKp)T^ + ai(Ai.)(p)r^ + T^ . 

Let P be the set of primes lying in P^p and Ppp that are unramified in FL. 
Choose an ordering {pi}i>i by norm of P, and let ai(Ap) and a2{Ap) denote 
the sequences 

{ai{Ap){pi)}i>i , {a2{Ap){pi)},>i 

respectively. In this section we use the results in §3.1 and §3.2 to prove equidis- 
tribution for ai(A) and 02 (A). 

Lemma 3.9. Let p he a prime of good reduction for A and E that splits in kM 
and is unramified in L. 

(i) With ui = Reai(0)(Frobp) and U2 = Imai(0)(Frobp) we have 



ai{A){p) = uiai{E){p) ± ^2^4 - ai(S)(p)2 . 
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(ii) With vi = Re 02 (^) (Frobp ) and V2 = Ima2(0)(Frobp) we have 



a2{A){p) = viai{E){pf-2vi + \ai{9){Fiohp)fTV2ai{E){p)^4: - ai{E){p)^ . 

Proof. Define Vcr{A) and Vsr{A) as in equation (3.4). We then have the following 
isomorphism of Q£[G'fej\/]-modules: 

ViiAkM) <» Q, ~ V^{A) ® V^iA) . 

By arguments analogous to those in [FitlO, Thm. 3.1], we have 

V^iA) ~ OmAE, A) ® V„{E) , V^{A) ~ Om^E, A) ^ V^E) . 

Thus there is an isomorphism of Q^[GfeM]-modules: 

Ve{A) ® Q, ~ eM,aiE, A) ® V4E) OmME, A) ® V^E) . (3.8) 



To shorten notation, we write Q;i(p) ior ai{EkM){p) — cr(a(i?fcM)(p))/ |jp|| 



1/2 



1/2 



as defined in (3.7). Then ai(p) = a{a{EkM){p))/ \\p\\ , and (3.8) implies that 



ai(^feM)(p) = -ai(p)ai(p)-ai(p)ai(p), 

2 (3-9) 

a2(^feM)(p) = a2(p)ai(p)2 + a2(p) ai(p) + ai(p)ai(p) , 

where ai(p) denotes ai(6')(Frobp). The proposition then follows from the fact 
that ai{EkM){p) = -ai(p) - ai(p). D 

Proposition 3.10. For t £ Gal{L/kM), let u = u{t) = |ai(6')(r)|. Then 
o,i{AkM) and a2{AkM) are equidistributed with respect to the measures 

(i) /i(ai(AfcAf )) := [^71171^ I^r 73^^1h2«,2«] , 

(ii) /i(a2(ylfeM)) := [rrkriiEr ^y33=^l[«2-2,«2+2] , 

whose support lies in the intervals /i = [—4,4] and I2 — [—6,6], respectively. In 
each sum r ranges over GaX{L / kM) , and IraW is the characteristic function of 
the interval [a, b] C R. Moreover, we have 

(i) M„[ai(AfeAf )] - [^ Er &o,„w" , 

(ii) M„[a2{AkM)] = irTlMj Er ^u^" ' 
where the integer bm.n is the coefficient of X" in [X'^ + mX + 1)". 
Proof. We can rewrite the equations in (3.9) as follows: 

aMkM){p) = |ai(p)|(^ai(p) + ^^ , 

a2{AkM){p) = l«2(p)|(^|{gJ^ai(p) + g|f^MP)) -2|a2(p)| + |ai(p)|^ 

= (a2(p)i/^ai(p) +^;M'^' Mp))' - 2+ |ai(p)|2 , 
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where ai(p) denotes ai(0)(Frobp), and we have used |a2(p)| — 1. The equidistri- 
bution statements now follow from the Cebotarev density theorem and the two 
facts below: 

(1) For any z e U(l) and any conjugacy class c of Ga\{L/kM), the sequence 
zai^c is /x(U(l))-equidistributed on U(l). Indeed, Proposition 3.6 ensures 
equidistribution of ai,c, and invariance under translations is in fact the 
defining property of the Haar measure. Thus the sequence zai,c +'zai^c is 
Mcm-equidistributed on Ii{EkM) — [~2,2]. 

(2) If a sequence /3 = {/3i}i>i is /^cm-equidistributed on [—2, 2], then for u £ R>o 

• The sequence u/3 is equidistributed on [— 2u, 2m] with respect to the 
measure -- ''^ 



• The sequence {f3f — 2 + u^}i>i is equidistributed on [u^ — 2,?i^ + 2] 
with respect to the measure - , '^^ 

Regarding the moments, the Cebotarev density theorem implies that 
where z{[t]) — —ai{6){T)/\ai{9){T)\. But now (1) implies that 



M„[z([T])ai + z{[T])ai \ P[r]] = 6o,« • 
The same argument is used to compute 



[L : kM] 



n~t 



One then applies 



E ( ?) P') ("^ - 2)"-^ ^ [X"]((X + 1)^ + (m - 2)X)^ 



i=0 



where [X"](/(X) denotes the coefficient of X" in the polynomial f{X). D 

We now generalize the definitions of o(r) and o{s) given in §1.2 for fc = Q. 

Definition 3.11. Let o{r) count the elements in Gal{L/kM) whose projec- 
tion in Gal{K/kM) has order r. Let o{s) count the elements in Gal{L/k) \ 
Ga\{L/kM) of order s. 

If fc = kM, then ai{A) is equidistributed with respect to n{ai{AkM)) and 
Mn[a^{A)] = Mn[a,{AkM)], for i = 1,2. 
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Corollary 3.12. Suppose k ^ kM. Then the ai{A) and a2{A) are equidis- 
tributed with respect to the measures 

(i) /i(ai(A)) := ^fi{ai{AkM)) + ^Sq , 

(ii) fi{a2{A)) := l^i{a,{AkM))+2[Lh^{o{^)S2 + o{4.)S-2+o{6)S_,+d{U)Si) , 

whose support lies in the intervals Ii = [—4,4] and I2 = [—6,6], respectively. 
Here 6z denotes the Dirac measure at z. We also have 

(i) Mn[ai{A)] = pI^(o(l)2" + o(3) + o(4)2"/2 + o(6)3"/2)6o,„ , 

(ii) Mn[a2iA)] = ^(o(l)fo4,„ + o{2)bo,n + o(3)6i.„ + o(4)62,„ + 0(6)63,™ 

+ o(2)2" + o(4)(-2)" + o(6)(-l)" + 0(12)) . 

Proof. We focus on the proof of the statements about the moments, since the 
arguments involved suffice to deduce the statements about the measures. State- 
ment (i) follows from Propositions 3.2, 3.4, and 3.10, and the equality 

M2n[ai{AkAi)] = 2 • M2„[ai(A)] , 

which follows from the fact that if p is a prime of k where A has good reduction 
and p is inert in kM, then A is supersingular at p and ai{A){p) — 0. 

For (ii), let v denote the nontrivial conjugacy class of Gal(fcAf/fc). Note that 

Mn[a2{A)] = ^M,,[a2iA) \ P,] + iM„[a2(A) | P,]. 

To compute M„[a2(A) | Pi] — Mn[a2{AkM)], we apply Proposition 3.10. We 
then claim that 

M„[a2(A,) I P.] = ^_l_^(o(2)2" + o(4)(-2)" + o(6)(-l)" + 0(12)) . 

We may restrict to primes p of fc that are inert in kM, of absolute residue 
degree 1, and of good reduction for both A and E. The polynomial Lp{A,T) 
must then be one of the five listed in (3.2). 

We now consider the Rankin-Selberg polynomial Lp{E,9q{E,A),T), whose 
roots are all products of roots of Lp{E,T) = 1 + T^, and all roots of the 
polynomial det{l — 9Q{E, A)(Frobp)T). More explicitly, if s is the order of Frobp 
in Gal(i/fc), one may apply Proposition 3.3 to compute Lf,{E,9q{E,A),T). 
This yields: 

s = 2: (l+r2)4 s = 6: {1 - T^ + T^)"^ s = 12: (1 + T^ + T'*)^ 

s = 4: (l-r2)4 s = 8: {1 + T^)^ 

By arguments analogous to those of [FitlO, theorem 3.1], there is an inclusion 
of (!2£[Gfe]-modules 

ViiA)CVe{E)®eQiE,A). 

This implies that Lp{A,T) divides Lp{E,6q{E,A),T). It immediately follows 
that LpIa,T) is 
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s = 2: 


(i + r2)2 


s = 6: 


i-r2 


s = 4: 


(1-T2)2 


s = 8: 


l + T-* 



. y4 g ^ ^2: 1 + T^ + T" 



Finally, we observe that the condition Lp{A,T) divides Lp{E,9q{E,A),T) im- 
plies that s can not attain any value other than the ones considered. D 

3.4 Additional remarks 

As noted in the introduction, all 32 of the genus 2 Sato- Tate groups with identity 
component isomorphic to U(l) can arise as the Sato- Tate group of an abelian 
variety A defined over k with Ag ~ E^, where E is an elliptic curve defined 
over k (with CM). 

However, not all 10 of the genus 2 Sato- Tate groups with identity component 
isomorphic to SU(2), can arise as the Sato- Tate group of an abelian variety A 
defined over k such that Aq ~ E^ , where E is an elliptic curve defined over k 

(without CM).' The Sato- Tate groups for which this is not true are the four 
whose component group contains an element of order 4 or 6. Indeed, recall 
that Oq{E, A) (resp. Oq{A)) is the representation afforded by Hom(i?L, Al) (g) Q 
(resp. End{AL) <E) Q). As in the proof of Proposition 3.2, one can then show that 
6Iq(A) = eq{E,A)^^, that is, ai(6'Q(A)) = ai(6'Q(£;, A))2. But if r G Gal(i^/fc) 
has order 4 or 6 then ai(6'Q(A))(r) = 2 or 3, which are not squares in Q. 

We end this section by computing the density Zi{Ak) of zero traces of an 
abelian variety A defined over k such that Ag ~ E^ for some elliptic curve E 

defined over Q. 

Lemma 3.13. Let A be an abelian variety defined over k such that A^ ^ E^ , 

where E is an elliptic curve defined over Q (not necessarily over k). Let M 
denote the CM field if E has CM, and let M = Q otherwise. Then 

, , , , |Gal(L/feAf)| */ i^-^^ : fc] = 1 > 

^l(^^-) = ^ ^ o(2) 



2 |Gal(L/feM)| 



if [kM : fc] = 2 . 



Proof. Except for a set of density zero, any prime p of fc that does not split 
in kM is supersingular, in which case ai{A){p) — 0. This gives density in 
the first case and density ^ in the second case. Among the primes that split 
in kM, we wish to show that exactly the proportion o(2)/|Gal(L/fcM)| have 
trace 0. Among these primes, the density of the supersingular primes is zero. 
Let p be a non-supersingular prime of good reduction for A that splits in kM . 
From Remark 4.8 in [FKRS12] in the non-CM case, and from Proposition 3.4 
in the CM case, the roots of Lp{A,T) are a, a, (rcn, Cr^^i where r is the order 
of Frobp in Gal(A'/fc) and where a/a is not a root of unity. It follows that 
a + a + CrCt + Cr^ = if and only if r = 2. One then applies the Cebotarev 
density theorem. D 



^AU Sato- Tate groups with identity component SU(2) can occur for an A over k such that 
Af!- ~ E^ for some eUiptic curve E, but this curve need not be defined over fc. 
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4 Twists oi y^ = x^ — X and y^ = x^ + 1 

In this section, we strengthen the resuhs of §3 in the particular case that k = Q 
and A ^q Jac(C), where C is a twist of the curve y^ — x^ — x or y"^ = x^ + 1. 
We first introduce some convenient notation. Let C2 and C3 denote the curves 
defined over Q by the equations 

C-o ■.y^=x'^- 5x'^ - 5x^ + 1, 6*3° : 2/2 = x*^ + 1 . 

The curve C2 is a twist of y^ = x^ — x, as one may verify by computing their 
respective Igusa invariants. As shown below, the Jacobian of (7° is Q-isogenous 
to the square of an elliptic curve defined over Q, a property that the curve 
y^ = x^ — X does not enjoy. We also note that the minimal field of definition of 
the endomorphisms of the Jacobian of C2 is Q(v'— 2), but for y^ — x^ — x it is 

Let £"2 and £"3 denote the elliptic curves defined over Q by the equations 

E°:Y^=X^- 5X^ - 5X + 1 , E°:Y^ = X^ + 1. 

Wc note that j{E°) = 2^53 and j{E^) = 0, thus E^ has CM by Q(V^) and 
E^ has CM by Q(\/^). 

To simplify notation, throughout this section d denotes either 2 or 3, and we 
write C° for C^, E° for E°, and M for Q(v^)- We use C to denote a twist 
of C° defined over Q. In the context of §3, we are specializing A-^ ~ E^ to the 

case where A = Jac(C) and E = E'^, as we now show. 

4.1 Fields of definition of isomorphisms 

Lemma 4.1. Jac(C)^) is Q-isogenous to (E^)'^ . 

Proof. We proceed as in the proof of Lemma 4.1 in [FLU]. The quotient of 
C^ by the non-hyperelliptic involution a{x,y) = {—x,y) is precisely the elliptic 
curve E^, thus Jac(C2) ~q E^ x E, where E is also an elliptic curve defined over 
Q. The automorphism ^(x,y) = {l/x,y/x^) does not commute with a, which 
implies that End(Jac(C°)) is nonabelian, and therefore Jac(C2) '-^q (E^)'^. D 

Lemma 4.2. The minimal numher field over which all the automorphisms of 
Cq are defined coincides with the minimal num,ber field over which all the en- 
domorphisms o/Jac(C)jj are defined. 

Proof. Let Ka (resp. Ke) denote the minimal number field over which all the 
automorphisms of CW (resp. all the endomorphisms of Jac(C)0) are defined. The 
fact that Aut(Ci<-^) is nonabelian and contains a non-hyperelliptic involution 
implies that Jac(C)i^^ ^ E"^ , where E is an elliptic curve defined over Ka. 
Since E has CM by M, it follows that K^ = KaM. But [CarOl, Prop. 7.3.1] 
asserts that M = Q{y/—5) is already contained in Ka if C is a twist of C3, 
whereas [Car06, Prop. 8] states that M = Q(\/— 2) is already contained in Ka 
if C is a twist of C2 . D 
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We use K to denote the field given by Lemma 4.2. We note that K \s a, 
Galois extension of Q, and we have M C K, with equality in the case C = C°. 

Lemma 4.3. Let (f> be an isomorphism from, C2- to CW. The following number 
fields coincide: 

(i) the minimal field over which all isomorphisms from Cjr to Cq are defined; 

(ii) the compositum of K (or even just M) and the minimal field L^ over which 
<f) is defined; 

(iii) the minimal field over which all homomorphisms from Jac(C°)0 to Jac(C)Q 
are defined; 

(iv) the minimal field over which all homomorphisms from E^ to Jac(C)Q are 
defined. 

Proof. Let Li, L2, L3, and L4 denote the fields defined by (i), (ii), (iii), and (iv), 
respectively. Any isomorphism ip from CS- to CW can be written as ?/; = a o 

and (/) o a° for some a G Aut{CK) and some a'-' e Aut{C''lj). This implies that 
Li C ML^ C KL^ = L2. Conversely, for any a° G Aut(C°,j) and a G Aut(Cif ), 
the compositions a o and o a" are isomorphisms from C^ to CW. It follows 
that L2 ^ Li. Thus we have shown Li = ML^ = KL^ = L2. 

The isomorphism from C° to Cl^ induces an isogeny Jac(C°)L^ ^ Jac(C)L^ , 
which we also denote 0. Any homomorphism from Jac(C*^)|j to Jac(C)Q can 
be written as V ° "^ for some ip € End(Jac(C)Q) ® Q. This implies that 
^3 C L^K, Ltj)M = L2. Conversely, it is clear that Li is contained in L3. 

Any endomorphism ip from Jac(C'')Q to Jac(C)Q can be written as (f>2 ° <Pi, 
where </>! e Hom(Jac(CO), {E°f) O Q and </)2 € (Hom(£;0^, Jac(C)z,J (g) Q)^. 
Thus L3 C L4. Conversely, any homomorphism from E^ to Jac(C)Q can be 

written as 02 ° 0i, where pi G Hom(_E°, Jac(C'')) (E) Q and 02 is an element of 
Hom(Jac(C0)L3, Jac(C)L3) ® Q • Thus L4 C L3. D 

We use L to denote the field given by Lemma 4.3, and we note that L is a 
Galois extension of Q that contains K. 

Remark 4.4. If A is the ahelian three-fold E^ x Jac(C), we observe that L coin- 
cides with the minimal field over which all the endomorphisms of Aq are defined. 
It follows that the component group ofST(A) is isomorphic to Gal(L/Q). 

4.2 The Galois module Hom(£^°, Jac(C)L) 

In this subsection we compute 9M.a{E^,3a.c{C)), strengthening Lemma 3.9 in 
the case where A ~q Jac(C). We take advantage of the following fact: the 
group Gal(L/Q) is isomorphic to a subgroup of Geo := Aut(C^) xi Gal(M/Q). 
Here the action of Gal(Af/Q) on Aut(CS^) is the natural one (see [FLU, §2]). 
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More precisely, let </> : Cl — ^ C^ be an isomorphism. Then 

A^ : Gal(L/Q) ^ Geo \^{a) = {(j>{''<Pr\nL/M{^)) 

is a monomorphism of groups, where ttl/m '■ Gal(L/Q) — >■ Gal(Af/Q) is the 
natural projection, as in [FLU, Lem. 2.1]. Now let 

Res^ A^ : Gal(L/Af ) -^ Aut(CS,^) 

be the restriction of A^ at Gal(L/Af). Consider the 2-dimensional Af -rational 
representation 

0BO,co : Aut(CS,,) ^ AutQ(Hom(£;0„ Jac(C")Af ) ®M,a Q) 

defined by 9Ef\co{a){'4>) = ao ip. As in [FLU, Thm. 2.1], one then has 

Oeo^co o Res^, A^ ~ OM^aiE°, Jac(C)) , (4.1) 

where 07\/^o-(i?°, Jac(C)) is the representation of Gal(i/Af) in Definition 3.1. 
Lemma 4.5. Let C be a twist of C'^ . Then: 

^^^ ^ixior X5 */ CO = CO (see Table 2). 

' ''"'''" \x8 or X9 tfC° = Cl (see Table 3), 

Proof. A glance at the character table of Aut(COj) (see Tables 2 and 3 in §6) 
tells us that any Af -rational faithful representation of degree 2 must have trace 
X4 or X5 when C° — C^, or trace xs or xs when C^ — C^. The two possibilities 
in each case correspond to the two different embeddings of M into Q. D 

Proposition 4.6. The index of K in L is at most 2. 

Proof. As in Lemma 4.1, let a be the non-hyperelliptic involution a(x, y) = 
{—x,y) of C". Let E be the elliptic curve C k / {<P~^ ouj)) defined over K (note 
that (p'^^acj) is an automorphism of C, all of which are defined over K). The 
isomorphism (p: Cl ^ Cl induces an isomorphism <j>: El — )■ E^. Thus i? is a 
i^-twist of i?o. From characterization (iii) of L in Lemma 4.3, it is clear that L 
is the compositum of K and the minimal field L ? over which is defined. 

When C° = C^, we have j{E) ^ 0,1728, and by [Sil09, p. 304] it follows 
that (p is then defined over a quadratic extension of K and [L : K] < 2. When 
CO = Cg, we have j{E) = 0, and in this case L = K{^), for some 7 € K. Let 
Lq = K{y^). It suffices to show that ^ G Lq. 

Suppose for the sake of contradiction that ^ ^ Lq. Then Gal(i/Lo) — C3. 
Lemma 4.5 then implies that if r is a nontrivial element of Gal(L/io), then 
Tr0Af^CT(£'O, Jac(C))(T) = —1. Therefore, the restriction of the representation 
afforded by the Gal(i/A/)-module Hom(£;£, Jac(C)L) ®A4,a Q to Gal(L/io) is 

Re4yMAE°,3a.c{C)) ^ X®X, 
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where x is any of the two nontrivial characters of Gal(L/Lo)- As in [FitlO, 
Thm. 3.1], we have 

Resi^ eMAE\i&c{C)) ® Va{E'') ~ K(Jac(C)), 

as ((^^[GLoJ-modules. This imphes that 

K(Jac(C)) ~ (x® K(i?")) ® (x® K(i?°)) , (4.2) 

as Qf[GLg]-niodules. However, as seen in Lemma 4.2, ia.c{C)Lo ~ E\ , which 
imphes the foUowing isomorphism of Q^[GL„]-modules: 

K(Jac(G))~K(i?)'®. (4.3) 

But now (4.2) and (4.3) together imply Fo-(i?°) ^ X (8) Kt(£'°), which is impos- 
sible. (We remark that if Res^ 0m,o-(£'°, Jac(C)) ~ X^® ■, one does not reach a 
contradiction; see Example 4.12). D 

Proposition 4.7. Let w be the hyperelliptic involution ofC'^. Then [L : K] — 2 
if and only if (w, 1) G Gc« lies in the image of A^. // [L: K] = 2, then the 
preimage of (w, 1) by X^ is the nontrivial element uj of Gal{L / K) . 

Proof. We first suppose that [L: K] = 2. Observe that for both C2 and G3, if 
a G Aut{C^.j) and Tr^^o co(a) = —2, then a = w. In view of the isomorphism 
in (4.1), it thus suffices to prove that 0M,cr (£'°, Jac(G))(aj) — ~2. From the 
proof of Proposition 4.6, we know that Ja.c{C)K ~ E'^, where E is an ehiptic 
curve defined over K with CM by M. Fix an isomorphism V'l : El — > E^. Fix 
an isogeny ■ip2'- Ek x Ek — )■ i&c{C)K- For i = 1,2, let ti : Ek — )■ Ek x Ek 
denote the natural injection to the ith factor. Then ^2 ° ^-i o V'l and ■02 o (,2 o ipi 
constitute a basis of the Q[Gal(L/M)]-niodule Hom(^^, Jac(C)L) ®M,aQ.- The 
claim follows from the fact that ^ij^i = — V'l, '^V'2 = "02, and "i^ = it. 
Now suppose that [L: K] = l. Recall the monomorphism 

A^: Ga\{K/Q) ^ kni{Cl,) j ^^^-^ x Gal(Af/Q) 

of equation (2.3). The commutativity of the diagram 

Geo 




Gal(L/Q) ^ Gal(i^/Q)C % Gca/^(^^i)) . 

implies that (w, 1) does not lie in the image of A^. D 

Remark 4.8. Let Hq := \(j,{G&\{L / AL)) . If {1,t) lies in the image of Xc/,, then 
X,f,{Gal{L/Q)) = Hq XI ((l,r)); indeed, Hq is normal in A0(Gal(L/Q)), since its 
index is 2, and HqH ((1, r)) is trivial. In this case, Hq is stable under the action 
o/Gal(M/Q). However it is not true in general that Gal(L/Q) ~ Hq xi ((l,r)) 
or that Hq is stable under the action of Gal{M/Q). 
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Proposition 4.9. For t in Gal(L/Q), let s = s(t), r — r{T), and t = i(r) 
denote the orders of t, the projection of t on G&\{K/Q), and the projection ofr 
on Gal(A//Q), respectively. The following hold: 

(i) The triple {s,r,t) is one of the 13 triples listed in Table 1. 

(ii) If T fixes M, then the triple {s,r, 1) determines, up to sign, the quantities 

ai(0)(r) = Tr0M,.(^°, Jac(C))(T), (4.4) 

a2(0)(r) = det0M,a(S", Jac(C))(T), (4.5) 

as specified in Table 1. 

(iii) For each triple {s,r,t), let F(^sj.,t)' [~2,2] — >■ [—4,4] x [—2,6] be the map 
defined in Table 1. For every prime p > 3 unramified in L of good reduction 
for both Jac(C) and E^ , there exists a unique triple {s,r,t) such that 

Fis,r,t){^i{E°){p)) = (u-ai(Jac(C))(p),a2(Jac(C))(p)), (4.6) 

with u ~ ±1 (m fact, u — 1 for (s, r, t) ^ (6, 6, 1) and (8, 4, 1)). Moreover, 
the unique triple {s,r,t) for which (4.6) holds is {fL{p),fK{p),fM{p)), 
where fpip) is the residue degree of p in F. 

Remark 4.10. Observe that for a prime p unramified in L such that fiviip) = I7 
we have 

a2{Jac{C)){p) = a2{e){FTohp) ■ ai{E°)[pf + |ai(0)(Frobp)|2 - 2a2(0)(Frobp) , 

where a2(0)(Frobp) — ±1. It follows that for any two twists C and C of C'^ we 
have 

a2(Jac(C))(p) EE ±a2(Jac(C"))(p) (mod p) . 

where ai{A){p) — p^''^ai{A){p) is the integer that appears as the coefficient of 
T* in the (unnormalized) L-polynomial Lp(A,T). 

Proof. For assertion (i) assume first that t = 1. Observe that s is the or- 
der of A</,(t) in Aut(C"/), and r is the order of the projection of A0(t) in 
Aut(C^,^) //^\ . Let c denote the conjugacy class of A0(t) in Aut(C'^). One 
finds that the pairs (r, s) are determined by the conjugacy class of r as follows: 



if C° = C? 



c: la 2a 26,2c 3a 4a 6a, 6& 6c 



3 ^ (r,s): (1,1) (2,1) (2,2) (3,3) (4,2) (6,6) (6,3) 

.„ „o _ ^0 / "^- ^'^ 2*^ 2^ ^"^ 4*^ ^'^ ^'^ 

~ ' \ir,s): (1,1) (2,1) (2,2) (3,3) (4,2) (6,3) (8,4) 

(see Tables 3 and 2 for the names of the conjugacy classes). Assertion (ii) now 
follows immediately by applying the isomorphism in (4.1) and Lemma 4.5. If 
t — 2, then r must be 2, 4, or 6, and the fact that [L: K] < 2 limits {s,r,t) to 
either one of the last 5 triples in Table 1, or (4,4,2). The latter possibility is 
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Table 1: The triples for {s,r,t) associated to t G Gal(L/Q) (as defined in 
Proposition 4.9), and corresponding values of i^(s^r.t) (2;), ai(0)(T), and 02(0) (t). 



{s,r,t) 




Pis,r,t){^) 


a,{0){r) 


«2(e)(T) 


(1,1,1) 




{2x,x^ + 2) 




2 




(2,1,1) 




{-2x,x'^ + 2) 




-2 




(2,2,1) 




(0,-x2 + 2) 







-1 


(3,3,1) 




i-x,x^-l) 




-1 




(4,2,1) 




(0,x2-2) 









(6,3,1) 




{x,x^-l) 




1 




(6,6,1) 


(v/3(4- 


-x^),-x^ + 5) 


±V 


^-3 


-1 


(8,4,1) 


(v/2(4- 


-a;2),-x2+4) 


±V 


^-2 


-1 


(2,2,2) 




(0,2) 




- 


- 


(4,2,2) 




(0,-2) 




- 


- 


(6,6,2) 




(0,-1) 




- 


- 


(8,4,2) 




(0,0) 




- 


- 


(12,6,2) 




(0,1) 




- 


- 



ruled out by Proposition 3.3: if s = 4, then for every prime p for which Frobp lies 
in the same conjugacy class of r in Gal(L/Q), we have Lp(Jac(C), T) = (1— T^)^, 
and the only quotients of roots of this polynomial are 1 and —1. This implies 
that 0M(Jac(C))(T) has order 2, and since 0M(Jac(C)) is faithful we must have 
r = r{T) = 2, not 4. 

For i = 1, the existence statement in (iii) follows from combining Lemma 3.9 
with statement (ii), and for t = 2, it follows from the proof of Corollary 3.12. 
The uniqueness of the map -F(s,r,i) satisfying (4.6) at a prime p > 3 may be 
verified by noting that the graphs of the 13 functions i^(s,r,t) intersect in only 
finitely many points in R^, none of which corresponds to a possible value of 
(ai(i?°)(p),ai(Jac(C))(p),a2(Jac(C))(p)) for any prime p > 3. Finally, we note 
that if r = Frobp then (s(r),r(r),i(T)) = (/l(p), /if (p), /m(p)). □ 

We now give two examples of abelian varieties A such that A^ ~ (^^)^ for 
which the conclusions of Propositions 4.6 and 4.9 do not hold because A is not 
Q-isogenous to the Jacobian of a twist of C'^. In the two examples below we use 
the elliptic curve 

E^:y^^x^+2 

defined over Q, which is a twist of £"3 . 
Example 4.11. Let A^ E°x E^. Then K = L = 



and s{t) = 3, then ai{0){T) — I + C3 or I + C3 and a2{0){T) = Cs or Cg, 



,C3). //TeGal(L/Af) 
which do 

not lie in Q. Thus by Proposition 4.9, A is not Q-isogenous to the Jacobian of 
any Q-twist ofC^. Moreover, for p — 7, one can compute that 02 (A) (7) — 30, 
while a2{{Elf){7) = a2(Jac(C§))(7) = 18. Thus 

a2(A))(7) ^ ±a2(Jac(C°))(7) (mod 7) . 
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Example 4.12. Let A = (£'^)^ then L = Q(v^,C3) and K ^ ^(Cs). Then 
[L: K] — 6„ and, by Proposition 4-G, A is not Q-isogenous the Jacobian of any 
Q-twist of Cg. In the context of the proof of Proposition J^.6, La = Q(-\/2, ^3) 
and Resl^e{E°,A) ~ x^®; rather than Re8^^e{E°,A) ~ x ® X, which avoids 
the contradiction used in the proof. Moreover, for A we may have s{t) —3 and 
r{T) = 1, which gives a pair (s, r) that can not occur for the Jacobian of any 
Q-twist of C^, by part (ii) of Proposition 4-9. 

4.3 The triples T{C) 

In this section we will determine the possible values of the triple T{C), which 
denotes the isomorphism class [Gal(L/Q), Gal(i^/Q), Gal(i/M)]. To specify 
triples explicitly, we use identifiers from the Small Groups Library [SGL] found 
in computer algebra systems such as GAP [GAP] and Magma [Magma] . These 
identifiers consist of a pair of positive integers (n, m) , where n is the order of the 
group and m distinguishes the group from other groups of order n but otherwise 
has no meaning. We also recall from §4.2 the embeddings 

A^ : Gal(L/Q) ^ Geo, Res A^ : Gal{L/M) -^ Aut(C^,^), 

A^: Gal(i^/Q) ^ G'co/((y;^ 1)) , Res A^: Gal(i^/M) ^ ^^^{Cli) j i^^'^ ^ 

where w denotes the hyperelliptic involution of C° . 

Lemma 4.13. The groups Geo, Geo / {{w,l)), A\xt{Cli), and Aut(CS^)/(ti;) 
are as follows: 

C° Geo Gco/{{w,l)) knijClj) knt{Cl)/{w) 

C^ (48,38) (24,14) (24,8) (12,4) 

G^ (96,193) (48,48) (48,29) (24,12) 

Proof. We show how to compute Gpo and Aut(C^); the respective quotients 
are then easily obtained. Recall that if C/Q is a genus 2 curve, given by a 
hyperelliptic equation y^ = f{x), where f{x) G Q[a;], then for any a £ Aut(CW) 
there exist m, n ,p ,q £ Q such that 

/ mx + n mq ^ np \ , ^ 

aix,y)^[ ^,-Jl_^y ; (4.7) 

\ px + q [px + q)-^ ) 

see, for example, [Gar06]. Let 

, , ( m n 
\P q 

The map l: Aut(CQ) — > GL2(Q) that sends a to t(a) is a GQ-equivariant 
monomorphism. For d = 2,3, we have Aut((G°)A/) = {Ud, Vd), where 
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^^-(i oj' ^^^Hi + V^ ^0 

^'-^[ 1 i + V^j' ^'~~^[-i-V^ 1 

One can readily check that Ud and Vd represent automorphisms of {C'^)m, and 
that they generate a group of order 48 if d = 2 and of order 24 if d = 3, which 
are known to be the orders of Aut((C°)M) • With this exphcit representation, 
the isomorphism type of {Ud, Vd) is then easily determined by a computer al- 
gebra system. The group Gqo is then determined by explicitly computing the 
semidirect product {Ud, Vd) xi Gal(Q(v^^)/(Q). D 

Let T{C) denote the triple 

(A4Gal(L/Q)), A^(Gal(i/M)), A^(Gal(L/M))) 

in Gcay-Gco^Gco- Since A^ is injective, the conjugacy class of T(C) determines 
T{C) and z{C), where z{C) is the vector in Definition 1.3. In order to bound 
the number of possibilities for T{C) and z{C), we first bound the number of 
possible triples T{C), up to conjugation. 

Lemma 4.14. Let H, N and Hq be subgroups of Geo. Iff{C) = {H,N,Ho), 
then the following conditions must be satisfied: 

(i) Hq and H n Aut^C'lj) x (1) coincide and have order \H\/2. 
(ii) N and {{w, 1)) n Hq coincide. 

Proof Let Gal(M/Q) = {l,r}. Then 

Ho = A^(Gal(L/Af)) C (Aut(CO,) x {1}) n H, 

Hi := X^{G'a\{L/Q) \ Gal{L/M)) C (Aut(CS,^) x {r}) n H. 

The injectivity of A^ implies that |iJo| — \Hi\ ~ \H\/2, and (i) follows from the 
fact that H = HqUHi. 

Proving (ii) is equivalent to showing that {w, 1) lies in the image of A^ if and 
only if [L: K] = 2. But this has already been proved, see Proposition 4.7. D 

Proposition 4.15. Let H, N , and Hq be subgroups ofGc", that satisfy condi- 
tions (i) and (ii) of Lemma 4.^4- Then the following hold: 

(i) For C'^ = 6*2 (resp. C^ — C^), there are exactly 27 (resp. 38j possibilities 
for the conjugacy class of {H,N,H^)) in Gqo x Geo x Gqo. 

(ii) For C'^ = C2 (resp. C^ = C^), the 27 (resp. 38) possibilities for the conju- 
gacy class of {H,N,Hq) give rise to exactly the 23 (resp. 23j isomorphism 
classes [H,H/N,Hq] and vectors z{H, N, Hq) listed in Table 4 (resp. Ta- 
ble 5). Moreover, [H, H/N, Hq] and z{H,N,Hq) determine each other 
uniquely. 
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(iii) For C" = C^ (resp. C° = C^) the triple T{C) and the vector z{C) must 
he among those listed in Table 4 (resp. Table 5), and T{C) and z{C) de- 
termine each other uniquely 

Proof. For (i), recall that G^o ~ (48,38) and Aut((C§)A/) ^ (24,8). The 
following three facts permit us to work with G^o and A\\i{{C'^) m) as abstract 
groups. First, there are exactly two subgroups Ai and A2 of (48, 38) isomorphic 
to (24,8). Second, there is a unique nontrivial central involution w in (48,38), 
and it lies in both Ai and ^2- Third, consider the two lists of triples of groups, 
up to conjugation, 

/:^^{(i/,(,«)nff,ffnA,)|7Jc(48,38),|ffnA,| = |iJ|/2}/_, i^i,2, 

where {H, {w)r\H,HnAi) ^ {H' , {w)nH' ,H'r\A,) ii H and H' are conjugated 
in (48, 38). Then the lists £1 and £2 coincide; write C for this list. For C" = C2 , 
the three previous facts can be checked to hold verbatim when replacing (48, 38) 
and (24,8) by (96,193) and (48,29), respectively. For C° = C^, C has 38 
elements and, for 0^^ = 02, it has 27 elements. 

For (ii), for each of (7° and C3 , we enumerate the triples {H, N, Hq) in £ and 
explicitly compute [H, H/N, Hq] and z(H, N, Hq) in each case using a computer 
algebra system [Magma], obtaining the values listed in Tables 4 and 5. One 
then checks that [H, H/N. Hq] = [H' , H'/N', H^] if and only iiz{H, H/N, Hq) = 
z{H',H'/N',H'^). 

Statement (iii) follows immediately from (ii) and Lemma 4.14. D 

Proposition 4.16. The vector z{C) and the triple T{C) both uniquely deter- 
mine the Sato-Tate group ST(Jac(C)). 

Proof. The 18 Sato-Tate groups G that can occur over Q with G" ~ U(l) (see 
[FKRS12, Theorem 4.3]) are uniquely determined by the combination of: 

(a) the isomorphism classes of the groups G/G'~' and G"*/G"*'°, 

(b) the vector Z2(G) = (z2,2(G), Z2,-2(G), z2,-i(G), z2,o(G), z2,i(G)),« 

where G"* is the index 2 subgroup of G obtained by removing from G those 
components all whose elements have a constant characteristic polynomial. 

On the one hand, the isomorphism classes of the groups G/G'~' and G"*/G"*'° 
are determined by T{G), since G/G° ~ Gal(i^/Q) and G^^/G""'" ~ Gal(A7M). 
On the other hand, Z2(G) is determined by z{G); indeed, it follows from the 
construction of the Sato-Tate group in terms of the image of the £-adic repre- 
sentation attached to Jac(G) and from assertion (iii) of Proposition 4.9, that 
Z2{G)-[L:K] = Z2iG). D 



^Following the notation of [FKRS12], recall that Z2,i{G) denotes the number of connected 
components of G all of whose elements have a constant characteristic polynomial, for which 
the coefficient of the quadratic term is equal to i. Note that the components of the vector 
22 (G) have been permuted with respect to the definition of Z2{G) given in [FKRS12]. 
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Corollary 4.17. For each triple [H,H/N,Ho] in Tables 4 or 5, there exists a 
twist C of C" such that T{C) = [H, H/N, Hq] if and only if the corresponding 
row in the table is not marked with an asterisk. Thus, for C^ = Cj (resp. for 
C'^ — C^) there are exactly 20 (resp. 21^ possibilities for T{C). 

Proof. Observe that the triples marked with an asterisk in Tables 4 and 5 cor- 
respond to Sato- Tate groups (equivalently, Galois types) that cannot arise for 
abelian surfaces defined over Q (see [FKRS12, proposition 4.11]). For each of 
the triples [H, H/N, Hq] that are not marked with an asterisk, a curve C with 
T{C) = [H, H/N, Ho] is exhibited in Tables 6 and 7 (for details on how the 
curves have been found, see §5.1; for details on how T{C) is computed for each 
of the curves see §5.3.) D 

Remark 4.18. Observe that if the triple [H,H,Hq] appears in Table 4 or 5, 
then the triple [H x C2,H,Hq x C2] also appears. In other words, if there exists 
a twist C of C'^ such that Gal(L/Q) — Ga\{K/'Q), then there exists a twist C of 
C° such that Gal{K'/Q) = Ga\{K/Q) and Ga\{L' /Q) ~ Ga\{K/Q) x C2. Here 
K' (resp. L' ) is the minimal field over which all the automorphisms of C (resp. 
all the isomorphisms between C and C" j are defined. Indeed, if C is given by 
the hyperelliptic equation y^ = f{x), let C' be the curve given by dy^ — f{x), 
where d € Q* is not a square in K. We will use this remark in ^5 for the 
computation of some of the curves. 

Remark 4.19. Among the 18 Sato-Tate groups with identity component U(l) 
that can occur over Q, there are 13 that are subgroups of J(0) and 11 that are 
subgroups of J(Dq) (6 are subgroups of both). From Table 7 we see that the 13 
that are subgroups of J{0) can all occur as Q-twists 0/C2, and the 11 that are 
subgroups of J{Dq) can all occur as Q-twists ofC^. 

5 Numerical computations 

We now describe the methods used to obtain the example curves C listed in 
Tables 6 and 7. As in §4, each curve C is a Q-twist of C° = C^, for d = 
2,3, where Jac(C5) ~ {E'^)'^ and E^ is an elliptic curve with CM by M = 
Q{y/—d). For d = 2 we list 20 curves C that are Q-twists of the curve C2 
defined by y^ = x^ — 5x^ — 5x^ + 1, realizing every possible triple T{C) = 
[Gal(L/Q),Gal(A'/Q),Gal(L/Af)] that can occur when C is a Q-twist of C§. 
Recall that the fields K and L are the minimal fields of definition End( Jac(C)Q) 
and Hom(Jac(C)Q, i^Q-), respectively, as in Definition 1.2. Similarly, for d — 3 
we list 21 curves C that are twists of the curve Cg defined hy y^ = x^ + 1, 
realizing every possible triple T{C) that can occur when C is a Q-twist of C3. 
For each of the two curves C" we followed the procedure outlined below: 

1. Generate a large set S of Q-twists of C°. 

2. For each C £ S compute a provisional value of the triple T{C). 
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3. Select a single representative C for each distinct triple T{C) and then 
verify the provisional value of T{C) by explicitly computing the fields K 
and L and the triple T{C) = [Gal(L/Q), Gal(X/Q), Gal(L/A/)]. 

The purpose of the "provisional" computation of T{C) in step 2 is to avoid 
computing the fields K and L for all of the curves in S, which would have been 
infeasible. Explicit computation of the fields K and L (and their Galois groups) 
for even a single curve C can be quite time consuming, taking many hours or 
even days of computer time, and the sets S that we used contained tens of 
thousands of curves. 

In the rest of this section we fill in some of the details of the three steps 
listed above. 

5.1 Generating twists of C° 

Explicit parameterizations of the families of twists of Cg and (7° are given by 
Cardona in [CarOl] and [Car06]. One can easily obtain a large set S using 
these parameterizations. However, the resulting curves tend to have large co- 
efficients, making the computation of K and L more difficult, and the vast 
majority of curves in S are likely to represent the generic case, where Ga.\{K/Q) 
and Gal(L/Q) are as large as possible. In principle, one can control the iso- 
morphism type of Gal(K/Q) by placing appropriate constraints on the input 
parameters, but this is not enough to determine the Sato- Tate group, and it 
gives no control over Gal(L/Q). 

We instead adapted the search method used in [FKRS12], generating S by 
enumerating all curves of the form y^ = X)i=o '-^*'^^ satisfying coefficient bounds 
\ci\ < Bi. To quickly identify curves C that are twists of C°, we first compute 
ai(C)(p) for a handful of small primes p that are inert in Af, and immediately 
discard C if ai{C){p) ^ for any such p. We then compute the absolute Igusa 
invariants of C, as defined in [Igu60], and compare them to the corresponding 
values for C". With the bounds Bi chosen to encompass some 2^" curves with 
small coefficients, we obtain a set S containing tens of thousand twists of C'^ in 
each case. 

After applying the method in §5.2 below to all of the curves in S, we had 
several candidate curves C for every possible triple T{C) that can arise when 
C is defined over Q (the triples listed in Tables 4 and 5 that are not marked 
with an asterisk). We then selected a single representative C for each triple 
and computed K and L for each of these C, as described in §5.3, and then 
computed the Galois groups Gal{L/Q), Gal(i^/Q), and Gal(L/A/), using the 
Magma computer algebra system [Magma], to obtain the true value of triple 
T{C). As expected, this computation confirmed the provisional value in every 
case. 



32 



5.2 Provisional computation of T{C) 

To provisionally identify the triple T(C), we compute an approximation of the 
vector z(C) (see Definition 1.3), which uniquely determines T{C), by Theo- 
rem 1.4. To do this, it suffices to determine the triples (s, r, t) of residue degrees 
{fL{p),fK{p),fM{p)) for a sample set of primes p (say, primes p < 2^^ of good 
reduction for C), and then count how often each triple appears. The compo- 
nents o{s, r) and o{s, r) of the vector z(C) may be approximated by computing 
the relative frequencies of the triples (s, r, 1) and (s, r, 2), respectively, and nor- 
malizing so that o(l, 1) = 1. 

We can easily compute t = /m(p) G {1, 2} by checking whether p splits in Af , 
but we also need to compute r = fxip) and s = fhip), and we would like to do 
so without knowing K or L. This can be achieved as follows: we first compute 
ai{E^){p) and the values ai{C){p) and a2{C){p), as described in §5.2.1, and 
then determine the unique map i^(s,r,t) from Proposition 4.9 for which 

F(,,,,,)(ai(i?°)(p)) = (±ai(C)(p),a2(C)(p)). (5.1) 

5.2.1 Computation oi ai{C){p) and a2{C){p) 

Efficient computation of ai{C){p) and a2{C){p) for an arbitrary genus 2 curve 
is addressed in [KS08], but in the special case of interest here, where C is a 
Q- twist of C°, we use a faster approach. The Jacobian of C° is Q-isogenous 
to the square of E^, an elliptic curve defined over Q. Because E'^ has complex 
multiplication, we can very efficiently determine ai{E){p). Taking 6*2 as an 
example, E2 is defined by the Weierstrass equation y^ — x^ ~ 5x^ — 5a; -I- 1. 
This curve has CM by M — Q(V— 2), and for any prime p > 2 we may compute 
a — ai{E2){p) as follows: a = if p is inert in M and otherwise a = 4x/^, 
where the integer x satisfies p — x'^ + 2y'^ for some integer y. The positive integer 
z = \x\ may be determined via Cornacchia's algorithm, and then x = {—lyz, 
where e — {z— l)/2 + {p— l)(p-|-5)/16; see [RSll] for details. The computation 
for Cg is similar: in this case E^ is defined by y^ = x^ + I, with CM by 

Having computed ai{E'^){p), there are only a handful of pairs (01,02) that 
are compatible with (5.1), that is, for which there exists a triple {s,r,t) such 
that F^s,r,t)icii{E°){p)) = (±01,02). Taking into account whether C is a twist 
of C2 or Cg, whether p splits in M or not, and that the sign of oi is actually 
ambiguous in only 2 cases, there are at most 8 possibilities. Each compatible 
pair (01,02) determines an integer 

n = p2 + p^/'^ai + pa2 + p^''^ai + 1, 

one of which is equal to # Jac(C)(Fp). In most cases, if we pick a random 
point P G Jac(C)(Fp), the equation nP = will hold for exactly one n and 
uniquely determine oi and 02. Even when this is not the case, after factoring 
the integers n we can determine the order of any point P in Jac(C)(Fp), using 
just Oilogp) operations in Fp; see [Su07, Ch. 7]. This allows us to compute the 
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order of Jac(C)(Fp) using a probabilistic generic group algorithm (of Las Vegas 
type) that runs in 0(p^/^) expected time; see [Su07] and [KS08, Prop. 1].^. This 
compares to an 0(p^'^) expected running time for an arbitrary genus 2 curve 
using a generic group algorithm.^" 

Having computed Lp(C, 1) — #Jac(C)(Fp), we use the same method to 
determine Lp{C, —1) — # Jac(C')(F — p), where C is any non-trivial quadratic 
twist of C over Fp, and these two values uniquely determines ai and 02- 

The algorithm described above is included in the most recent version of the 
small jac software library, whose source code is available at [Sullb]. 

5.3 Computation of K and L 

In this section, we describe the procedure used to compute the fields K and L 
for the curves C listed in Tables 6 and 7. 

For the field K, its characterization in Lemma 4.2 as the minimal field over 
which all the automorphisms of C are defined turns out to be the most com- 
putationally effective. For all 41 curves C: ip = f{x) listed in Tables 6 and 7, 
one readily checks that Aut(C^) ~ Aut(CQ) = Aut(Ci7(j2^)), where F is the 
splitting field of f{x) (see Remark 5.1 below). It is then a finite problem to 
identify the minimal subfield K of F{C,2a) for which Aut(Ci<-) = Aut(Cp'(^24))- 

Having computed K ^ we determine L as follows. For any non-hyperelliptic 
involution /3 e Aut(C^^), the elliptic quotient C°/(/3) is defined over M . If /3i 
and ^2 are conjugate in Aut(Cj^), then C"'/(/3i) ~ C°/(/32). For C^ there is 
just one conjugacy class of non-hyperelliptic involutions, hence in this case every 
elliptic quotient C°/(/3) is isomorphic to E^^. For C3 there are two conjugacy 
classes of non-hyperelliptic involutions, of size 2 and 6 (see Table 3). The first 
corresponds to the M- isomorphism class of £^3 , and the second corresponds to 
the M-isomorphism class of the elliptic curve y^ = x^ — \bx + 22. 

Since we know K explicitly, we can compute Aut(Cif ) and enumerate all the 
non-hyperelliptic involutions a (there are 12 when d — 2 and 8 when d — i). 
For d = 2, we pick any a, and for d = 3 we pick a from the conjugacy class 
of size 2. Define E := CkJ^oi) and & :— C^j / {(j)a(l)~^) . The isomorphism (j) 
induces an isomorphism <j>: El — ^ -B°. As in the proof of Proposition 4.6, L is 
the compositum of K and the minimal field over which (p is defined. Our choice 
of a insures that E^ ~ E^^ , thus El — E^- 

By applying [CGLR99, Lemma 2.2], we can compute an explicit Weierstrass 
equation for E of the form 

E:Y^=X'^ + AX + B, with A, B e K, 

Writing E° in the form Y^ = X'^ + UX + V, there then exists 7 e L such that 
U = J* A and V = J^B, and 7 generates L as an (at most quadratic) extension 
of K. We can easily derive 7 from the coefficients A, B, U, and V. 



^The 0{p^''^) bound is a worst case estimate, it is faster than this for most p 
^''As noted in [KS08], the asymptotically faster polynomial-time algorithm of Pila [Pila90] 
is not practically useful in the range of p relevant to the computations considered here. 
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Remark 5.1. In fact, it is true in general that for any twist C of C2 (resp. 
C^), the field K is contained in F{\/—2) (resp. _F(\/— 3, i)). We thank J. Quer 
for kindly providing the following argument. 

Lei Aut(CW)* denote the subgroup o/Aut(CQ) generated by those elements a 
such that Trace(i(a)) is nonzero. We claim that Aut(CW)* = Aut(CFM)*- L^t 
WP(C) denote the set of Weierstrass points of C and let a be an element of 
GpM- It suffices to show that "a — a for every a in Aut(CW)* such that 
Trace(i(Q;)) is nonzero. Observe that for every P in WP(C), one has "^ P = P. 
Then, writing Q = a"^(P), we have 

"a o a-i(P) = Ca){Q) = "(a(Q)) = '' P = P , 

which implies that "a is either a or wa, since the action of Aut{CQ)/{w) on 
WP(C) is faithful. Provided that Trace(i(Q;)) is in M , the latter option is not 
possible, since otherwise we would have 

Trace(i(Q;)) = '^ Trace(i(a)) = Trace(i(wa)) — — Trace(t(a)) , 

contradicting the fact that Trace(i(Q;)) is nonzero. Since Aut(CW) and Aut(Ci) 
are conjugated, the groups Aut{C-^)* and Aut{C^)* are isomorphic. It is straight- 
forward to check that 

Aut((C2")Q)* ~ S4 and Aut{{C°)^y ~ C2 x Cg . 

Thus, for every twist C of C2, the field K is contained in F{\/—2); but for a 
twist C of C^ the order of A\it{{C^)pirzi^\) can be 12 or 24. By considering 
the parameterizations given by Cardona [CarOl, Prop. 7.4--1] of all the twists C 
of C^ as well as of the corresponding embeddings t(Aut(CQ)) in GL2(Q), one 
may explicitly verify that K is always contained in F{-\/~?>, i). 

5.3.1 An example 

Consider the twist C of C" defined by the hyperelliptic equation 

y2 = j(a;) =x^ + ISx"^ + 20a;^ + aOa;^ + 18x + 5 

over Q. This curve is listed in Table 7 for the triple [(24, 5), (12, 4), (12, 1)]. Let 
us prove that this is in fact the triple T{C) = [Gal(L/Q), Gal(K/Q), Gal(L/M)]. 

We first compute K. Let F denote the splitting field of f{x). One checks (via 
Magma) that | Aut(CMF)| = 24, where M = Q{y/^), and therefore K C MF 
(since we know a priori that | Aut(Ci4:)| — \ Aut((C3)Q)| = 24). By enumerating 
the various subfields of MF, we find that the minimal subfield K of MF for 
which I Aut(Ci^)| = 24 is if = M{y/5, a), where a^ + 3a - 1 = 0. 

To compute L, we choose the non-hyperelliptic involution a of Aut{CK) 
whose image under the map l: Aut(CQ) — > GL2(Q) defined in (4.7) is 

. ^ 1 / \/5 -2V5 
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Applying [CGLR99, Lemma 2.2] yields a Weierstrass equation for E = C/{a) 
E:Y^ = X^ + B, withB = -— — — — V5- 



97656250 3906250 

Since E'^ is the curve y^ = x^ + 1, we have U — Q and y = 1, so 7^ == 1/B. 
This implies that 

n /125 r- 375\ , /125 r- 125\ r- 

7'- (— ^+ — )« + (— V5 + — ja-125%/5-375 = 0, 



and one finds that L = K{\/2V5 + 10). 

Having explicitly computed the fields A' and L, it is then straight-forward 
to verify that Gal(L/Q) ~ (24, 5), Gal{K/Q) ~ (12, 4), and Gal{L/M) ~ (12, 1) 
using Magma. 

6 Tables 

This section contains tables described in earlier sections, whose definitions we 
briefiy recall. Remember that C" is one of the two curves C^: y^ — x^ + 1 
(in which case M = Q(\/— 3) or C2 : y^ — x^ — bx'^ — bx^ + 1 (in which case 
M = Q(a/^). Tables 2 and 3 are the character tables of Aut((C^)Q) and 
Aut((C2)Q). Tables 4 and 5 list (up to isomorphism) the possible values of the 
triples T{C) that can arise when C is a Q- twist of the curve C°. 

The computation of these tables is described in §4.3. Each triple [H, H/N, Hg] 
is a possible value for T{C) = [Gal(L/Q), Gal(if/Q,Gal(L/M)], and is deter- 
mined by a subgroup H C Gpo whose intersection with Aut(C^) is an index 2 
subgroup Hq of H, where N = H (1 Z{Gco). 

For each triple T{C) we list the corresponding Sato- Tate group G and its 
matching Galois type, as defined in [FKRS12], as well as the vector z{C) given 
by Definition 1.3, all of which are uniquely determined by T{C), by Theorem 1.4. 
As proven in [FKRS12], the Sato- Tate groups J(Ci), JiCs), and C4,i cannot 
arise for a genus 2 curve defined over Q, and the corresponding rows in Tables 
4 and 5 are marked with an asterisk. 

In Tables 7 and 6 we list representative curves that realize every triple T{C) 
that can occur when C is defined over Q. For each curve we also give an 
explicit description of the fields K and L, where K is the minimal field for 
which Aut (Ck) = Aut(CW), and L is the minimal extension of K over which 
C is isomorphic to C". The methods used to obtain these curves and the 
computation of K and L are described in §5. 
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Table 2: Character Table of Ant{{C^)M) ^ (48, 29) 



Class la 2a 2b 3a 4a 6a 



8b 



Size 


1 


1 


12 


8 


6 


8 


6 


6 


Xi 


1 


1 


1 




1 




1 


1 


X2 


1 


1 


-1 




1 




-1 


-1 


X3 


2 


2 





-1 


2 


-1 








X4 


2 


-2 





-1 







^/^ - 


V-2 


X5 


2 


-2 





-1 





1 


-v^ 


V-2 


X6 


3 


3 


1 





-1 





-1 


-1 


X7 


3 


3 


-1 





-1 





1 


1 


X8 


4 


-4 





1 





-1 









Table 3: Character Table of Aut((C§)M) ^ (24, 8) 
Class la 2a 2b 2c 3a 4a 6a 6b 6c 



Size 






2 


6 


2 


6 


2 


2 


2 


Xi 






1 


1 




1 








X2 






1 


-1 




-1 








X3 






-1 


-1 




1 


-1 


-1 




X4 






-1 


1 




-1 


-1 


-1 




X5 


2 


2 


-2 





-1 









-1 


X6 


2 


-2 



















-2 


X7 


2 


2 


2 





-1 





-1 


-1 


-1 


X8 


2 


-2 








-1 


- 


V^ 


V-3 




X9 


2 


_2 








-1 





V^i 


V-3 
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Table 4: Triples for twists of C^ 






G 


H 


H/N 


^0 


Galois type 


z{H,N,Ho) 


*J(Ci) 


(4,1> 


(2,1) 


(2,1) 


F[C2,Ci,H] 


[1,1,0,0,0,0,0,0,0,0,2,0,0,0] 


J{C2) 


(8,2) 


(4,2) 


(4,1) 


F[D2,C2,H] 




1,0,0,2,0,0,0,0,2,2,0,0,0] 


JiC2) 


(8,3) 


(4,2) 


(4,2) 


F[D2,C2,H] 




1,2,0,0,0,0,0,0,2,2,0,0,0] 


*J(C3) 


(12,2) 


(6,2) 


(6,2) 


F[C6,C3,H] 




1,0,2,0,2,0,0,0,0,2,0,0,4] 


J{C4) 


(16,6) 


(8,2) 


(8,1) 


F[C4 XC2,C4] 




1,0,0,2,0,0,4,0,2,2,0,4,0] 


JiD2) 


(16,11) 


(8,5) 


(8,3) 


F[D2 XC2,D2] 




1,4,0,2,0,0,0,0,6,2,0,0,0] 


J{D2) 


(16, 13) 


(8,5) 


(8,4) 


F[D2 X C2,D2] 




1,0,0,6,0,0,0,0,6,2,0,0,0] 


J(D3) 


(24,6) 


(12,4) 


(12,4) 


F[D6,D3,H] 




1,6,2,0,2,0,0,0,6,2,0,0,4] 


J{Di) 


(32, 43) 


(16,11) 


(16,8) 


F[D4 XC2,D4] 




1,4,0,6,0,0,4,0,10,2,0,4,0] 


J{T) 


(48, 33) 


(24, 13) 


(24, 3) 


F[A4 X C2,A4] 




1,0,8,6,8,0,0,0,6,2,0,0,16] 


J{0) 


(96, 193) 


(48, 48) 


(48, 29) 


F[S4 XC2,S4] 




1, 12, 8, 6, 8, 0, 12, 0, 18, 2, 0, 12, 16] 


C2,l 


(2,1) 


(2,1) 


(1,1> 


F[C2,Ci,M2(R)] 




0,0,0,0,0,0,0,0,1,0,0,0,0] 


C2,l 


(4,2) 


(2,1) 


(2,1) 


F[C2,Ci,M2(M)] 




1,0,0,0,0,0,0,0,2,0,0,0,0] 


*C4.1 


(8,1) 


(4,1) 


(4,1) 


F[C4,C2] 




1,0,0,2,0,0,0,0,0,0,0,4,0] 


D2,l 


(4,2) 


(4,2) 


(2,1) 


F[D2,C2,M2(K)] 




0,1,0,0,0,0,0,0,2,0,0,0,0] 


D2,l 


(8,3) 


(4,2) 


(4,1) 


F[D2,C2,M2(M)] 




1,0,0,2,0,0,0,0,4,0,0,0,0] 


D2,l 


(8,5) 


(4,2) 


(4,2) 


F[D2,C2,M2(M)] 




1,2,0,0,0,0,0,0,4,0,0,0,0] 


D-A,2 


(6,1) 


(6,1) 


(3,1) 


F[D3,C3] 




0,0,2,0,0,0,0,0,3,0,0,0,0] 


D3,2 


(12,4) 


(6,1) 


(6,2) 


F[D3,C3] 




1,0,2,0,2,0,0,0,6,0,0,0,0] 


Di,l 


(16,7) 


(8,3) 


(8,3) 


F[D4,D2] 




1,4,0,2,0,0,0,0,4,0,0,4,0] 


£'4,1 


(16,8) 


(8,3) 


(8,4) 


F[D4,D2] 




1,0,0,6,0,0,0,0,4,0,0,4,0] 


1)4,2 


(16,7) 


(8,3) 


(8,1) 


F[D4,C4] 




1,0,0,2,0,0,4,0,8,0,0,0,0] 


Oi 


(48, 29) 


(24, 12) 


(24, 3) 


F[S4,A4] 




1,0,8,6,8,0,0,0,12,0,0,12,0] 



G 



H 



Table 5: Triples for twists of 

H/N Ho Galois type 



z{H,N,Ho) 



*J{Ci) 

J{C2) 

J(C2) 

*J{C3) 

J{C(i) 

Ji.D2) 

Jim 

JiDe) 

C2,l 
C2,l 

Ce,! 

D2,l 
D2,l 
D2,l 
D3,2 
D3,2 
D6,l 
D6,l 
D6,l 
D&,2 
D6,2 



4,1) 

8,2) 

8,3) 

12,2) 

24, 10) 

16,11) 

24,5) 

24,6) 

48, 38) 

2,1) 

4,2) 

6,2) 

12,5) 

4,2) 

8,3) 

8,5) 

6,1) 

12,4) 

12,4) 

24,8) 

24, 14) 

12,4) 

24, 14) 



:2,i) 

4,2) 

4,2) 

6,2) 

12,5) 

'8,5) 

12,4) 

12,4) 

24, 14) 

2,1) 

2,1) 

6,2) 

6,2) 

4,2) 

;4,2) 

;4,2) 

6,1) 

6,1) 

12,4) 

12,4) 

12,4) 

12,4) 

12,4) 



2,1) 

4,1) 

4,2) 

6,2) 

12,5) 

8,3) 

12,1) 

12,4) 

24, 8) 

1,1) 

2,1) 

3,1) 

6,2) 

2,1) 

4,1) 

4,2) 

3,1) 

6,2) 

6,1) 

12,1) 

12,4) 

6,2) 

12,5) 



F[C2,Ci,e] 

F[D2,C2,H] 
F[D2,C2,H] 
F[C6,C3,H] 

F[C6 XC2,C6] 
F[D2 XC2,D2] 

F[D6,D3,e] 
F[D6,D3,e] 

Fp6 XC2,D6] 

F[C2,Ci,M2(M)] 
F[C2,Ci,M2(R)] 
F[C6,C3,M2(IR)] 

F[C6,C3,M2(I;)] 

F[D2,C2,M2(IR)] 

F[D2,C2,M2(IR)] 

F[D2,C2,M2(R)] 

F[D3,C3] 

F[D3,C3] 

F[D6,D3,M2(M)] 

F[D6,D3,M2(M)] 

F[D6,D3,M2(M)] 

F[D6,C6] 

F[D6,C6] 



1,0,0,0,0,0, 


1,0,0,2,0,0, 


1,2,0,0,0,0, 


1,0,2,0,2,0, 


1,2,2,0,2,4, 


1,4,0,2,0,0, 


1,0,2,6,2,0, 


1,6,2,0,2,0, 


1,8,2,6,2,4, 


0,0,0,0,0,0, 


1,0,0,0,0,0, 


0,0,2,0,0,0, 


1,0,2,0,2,0, 


0,1,0,0,0,0, 


1,0,0,2,0,0, 


1,2,0,0,0,0, 


0,0,2,0,0,0, 


1,0,2,0,2,0, 


0,3,2,0,0,0, 


1,0,2,6,2,0, 


1,6,2,0,2,0, 


0,1,2,0,0,2, 


1,2,2,0,2,4, 



,0,0,0,2,0,0,0] 

,0,0,2,2,0,0,0] 

,0,0,2,2,0,0,0] 

,0,0,0,2,0,0,4] 

,0,0,2,2,4,0,4] 

,0,0,6,2,0,0,0] 

,0,0,6,2,0,0,4] 

,0,0,6,2,0,0,4] 

,0,0,14,2,4,0,4] 

,0,0,1,0,0,0,0] 

,0,0,2,0,0,0,0] 

,0,0,1,0,2,0,0] 

,0,0,2,0,4,0,0] 

,0,0,2,0,0,0,0] 

,0,0,4,0,0,0,0] 

,0,0,4,0,0,0,0] 

,0,0,3,0,0,0,0] 

,0,0,6,0,0,0,0] 

,0,0,4,0,2,0,0] 

,0,0,8,0,4,0,0] 

,0,0,8,0,4,0,0] 

,0,0,6,0,0,0,0] 

,0,0,12,0,0,0,0] 
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Table 6: Twists of C2 : j/^ = a;^ — 5.t"' — hx^ + 1 realizing each triple. 

G [Gal(L/Q),Gal(7f/Q),Gal(L/M)] K L 



y' = ^'' 


— X 

(8,2), (4,2), (4,1) 


M{i) 






7(C2) 


a:(772 + 2) 




3/= = x« 

J(C2) 


+ 4x 

(8,3), (4,2), (4,2) 


M{i) 


7f(72) 




y= = x'' 


+ x'' - 5x* - Sx^ - X + 1 

(16,6), (8,2). (8,1) 








7(C4) 


A7(^VT7+17) 


7f (■\/(vT7 + 3) 7VT7 + 17 - 


-8VT7) 


7(7)2) 


+ 9x 

(16,11), (8,5), (8,3) 


M(i, 73) 


a:(^) 




7(7)2) 


— 9x 

(16,13), (8, .5), (8,4) 


M(i, 73) 


Ki^i) 




y^ = x« 


+ lOx^ - 2 

(24,6), (12,4), (12,4) 


M(v^^, 7^^) 






7(7)3) 


7f(776-2) 




y2 =^5 

7(7)4) 


+ 3x 

(32,43), (16,11), (16,8) 


M(i, 73) 


a:(73) 




7(T) 


+ &x^ - 20x* + 20x^ - 20x^ - 

(48,33), (24,13), (24,3) 


8x + 8 

A7(ui , 112) 


7f(V^) 




7(0) 


- Sx'' + lOx" - 5x^ + 2x - 1 

(96,193), (48,48), (48,29) 


M(V-11,M3.«4), 


7f(y^) 




C2,l 


- 5x* - 5x^ + 1 

(2,1), (2,1), (1,1) 


M 


K 




3/^ = -x'' + 5x* + Sx^ - 1 

C2,i (4,2), (2,1), (2,1) 


M 


Kii) 




y^ = x^ 

7)2,1 


1 jjj 

(4,2), (4,2), (2,1) 


M(i) 


K 




y^ = x« 


+ 3x'* - 20x'' + 30x'' - 35x^ + 

(8,3), (4,2), (4,1) 


3x + 10 

M(\/7) 






7)2,1 


7^(^3^7 + 7) 




y2 =^5 

7)2,1 


+ 81x 

(8,5), (4,2), (4,2) 


M(j) 


a:(V3) 




y^=x'' 

7)3,2 


- ISx'' - 15x* - 20x^ + 135x^ 

(6,1), (6,1), (3,1) 


- 498x - 89 

M(ur,) 


K 




y^ = x'' 

D3,2 


+ 4x^5 - lOx* + SOx'' + 140x2 _|_ -^44^ _ -^g4 

(12,4), (6,1), (6,2) M(«6) 


K(t) 




y^ = x- 

7)4,1 


- 2x 

(16,7), (8,3), (8,3) 


M{i ^/'=2) 


K(^f=2) 




y= = x'^ 

7)4,1 


+ 2x 

(16,8), (8,3), (8,4) 


M(i^) 


K(^) 




y= = x« 


+ x'' + lOx" + Sx^ + X - 2 

(16,7), (8,3), (8,1) 








7)4,2 


m(77=7 + 7) 


7f (^/-7=2^y=7 - 7 + 2v 


-^) 


y= = x'' 


+ Ix^ + lOx* + lOx^ + ISx^ + 

(48,29), (24,12), (24,3) 


17x + 4 

M(U7,M8) 






Oi 


K{^-ul + ul + 5us+i) 





Ml - 7ui + 7 = 'U2 + 4m2 + 8m2 + 8 = «3 - 4m3 + 4 = m^ + 22m4 + 22 = m;^ + 6M5 -8 = 0, 

Me + 5«6 - 10 = M? + 5m7 + 10 = «g + 4Mg + 8M9 + 2 = 0, 

vl^ - 12t)" + 701)" - 236t>? + 337^1 - iOvl - 420t>i + ib2vl - lbOv{ + l&v^ - 28t>i + 8t>i + 1 = 0, 

vl'^ + 44t)2^ + 682^2° + 4048t)2 + 3135m| - 19844m| + 306614m^ + 1783540t)2- 
5571929^2 + 85184t)^ + 1269774t)2 - 1293732t)2 - 970299 = 0, 
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Table 7: Twists oi C^: y^ — x^ + 1 realizing each triple. 

[Gal(L/Q),Gal(K/Q),Gal(L/M)] K L 



J(C2) (8,2), (4,2), (4,1) M(V5) 

y'^ = x^ + lOx'' + 9a; 

J(C2) (8,3), (4,2), (4,2) M{i) 

y^ = x" - 15a;* — 20x^ + 6x + 1 

JiCe) (24, 10), (12,5), (12,5) M{i,ui) 

y^ = x'^ + 20a;'' + 36x 

J(r>2) (16,11), (8,5), (8,3) M(i,\/2) 

y^ = x" + 15x* + 20x^ + 30x^ + 18x + 5 

J(A?) (24,5), (12,4), (12, 1) M(V5,«i) 

y^ = x" + 6x'' + 40x'' - 60x^ + 72x — 32 

J(A?) (24,6), (12,4), (12,4) M(i,«2) 

y^ = x** + 3x'* + lOx^ - 15x^ + 15x — 6 

J{De) (48,38), (24, 14), (24, 8) M{i,V2,U3) 

y^ =xO + l 

C2.1 (2,1), (2,1), (1,1) M 

3/^ = x** + 15x* + ISx^ + 1 

C2.1 (4,2), (2,1), (2,1) M 

y^ = — x'' — 6x^ + 30x* - 20x^ - 15x^ + 12x - 1 

C6,i (6,2), (6,2), (3,1) M{ui) 

y^ = x® + ex** — 30x* + 20x^ + 15x^ - 12x + 1 

C6,i (12,5), (6,2), (6,2) M(«i) 

y= = x" - 1 

D2,l (4,2), (4,2), (2,1) M{i) 

y^ = llx" + 30x'' + 30x* + 40x^ — 60x^ + 120x — 88 

1)2,1 (8,3), (4,2), (4,1) M(V^2) 

y^ = x® - 15x* + 15x^ - 1 

152,1 (8,5), (4,2), (4,2) M(i) 

y^ = x" + 4 

£■3,2 (6,1), (6,1), (3,1) M(^) 

3/^ = x" + 12x'* + 15x* + 40x^ + 15x^ + 12x + 1 

r>3,2 (12,4), (6,1), (6,2) M(^) 

y'^ = x" + 9x^ — 60x* — 120x^ + 240x^ + 144x - 64 

D6,i (12,4), (12,4), (6,1) M{i,U4.) 

y^ = x" + Gx^ — 30x* — 40x^ + 60x^ + 24x — 8 

De,i (24,8), (12,4), (12, 1) M(v^2,tt5) 

y^ = x® + 3x'* + 15x* - 20x'' + 60x^ - 60x + 28 

1)6,1 (24, 14), (12,4), (12,4) M(V^2,ti2) 



7<-(^) 

-ff(^2v^ + 
A'(^) 

K(i) 



K(V2) 
K 

K 






y^ =xO + 2 

De,2 (12,4), (12,4), (6,2) 



M(^) 



y^ = x" + 6x^ — 15x* + 20x^ — 15x^ + 6x - 1 

£)6,2 (24, 14), (12,4), (12,5) M(V^2,U6) 



_ff 



K(i) 



Ml - 3mi + 1 = U2 - 3u2 + 4 = U3 + 3m3 - 2 = M4 - 15tt4 - 10 = 0, 
M5 — 9u5 — 6 — U7 — 6m7 — 6 — 0. 
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